Edit tour

Windows Analysis Report
Payload 94.75 (3).225.exe

Overview

General Information

Sample name:	Payload 94.75 (3).225.exe
Analysis ID:	1547865
MD5:	702eb701c63b9e10c77e704392d1e924
SHA1:	dbb6860f07624510de93f7ee8cd85200d79e7724
SHA256:	4a7d98590befe7f48428ee7a1017f74cb36aefb96a7ceff59a630c1c1b472439
Tags:	94-75-225-81exeuser-JAMESWT_MHT
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Connects to many ports of the same IP (likely port scanning)

Found Tor onion address

Machine Learning detection for sample

Sigma detected: Potentially Suspicious Malware Callback Communication

Connects to several IPs in different countries

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Found potential string decryption / allocating functions

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Classification

Process Tree

System is w10x64

Payload 94.75 (3).225.exe (PID: 6508 cmdline: "C:\Users\user\Desktop\Payload 94.75 (3).225.exe" MD5: 702EB701C63B9E10C77E704392D1E924)

conhost.exe (PID: 6536 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Payload 94.75 (3).225.exe (PID: 6388 cmdline: "C:\Users\user\Desktop\Payload 94.75 (3).225.exe" MD5: 702EB701C63B9E10C77E704392D1E924)

conhost.exe (PID: 616 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Payload 94.75 (3).225.exe (PID: 5876 cmdline: "C:\Users\user\Desktop\Payload 94.75 (3).225.exe" MD5: 702EB701C63B9E10C77E704392D1E924)

conhost.exe (PID: 6644 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Sigma Signatures

System Summary

Sigma detected: Potentially Suspicious Malware Callback Communication

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DestinationIp: 143.110.156.176, DestinationIsIpv6: false, DestinationPort: 65535, EventID: 3, Image: C:\Users\user\Desktop\Payload 94.75 (3).225.exe, Initiated: true, ProcessId: 6388, Protocol: tcp, SourceIp: 192.168.2.5, SourceIsIpv6: false, SourcePort: 49718

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\Desktop\Payload 94.75 (3).225.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\Payload 94.75 (3).225.exe, ProcessId: 6508, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\nzppj427v4

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-03T09:41:52.750407+0100	2022930	1	A Network Trojan was detected	172.202.163.200	443	192.168.2.5	49745	TCP
2024-11-03T09:42:32.081538+0100	2022930	1	A Network Trojan was detected	4.245.163.56	443	192.168.2.5	49947	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Payload 94.75 (3).225.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: Payload 94.75 (3).225.exe	Virustotal: Detection: 80%			Perma Link
Source: Payload 94.75 (3).225.exe	ReversingLabs: Detection: 81%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 97.9% probability

Machine Learning detection for sample

Source: Payload 94.75 (3).225.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105A194 memmove,CryptImportKey,	0_2_00007FF6B105A194
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105B1A4 free,free,free,memcmp,free,free,CryptGenRandom,	0_2_00007FF6B105B1A4
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105A9E8 CryptGenRandom,free,free,free,free,CryptGenRandom,inet_ntoa,inet_ntoa,	0_2_00007FF6B105A9E8
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B10611FC free,free,free,CryptGenRandom,free,free,	0_2_00007FF6B10611FC
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1059A1C CryptHashData,CryptHashData,CryptDestroyKey,CryptDestroyKey,	0_2_00007FF6B1059A1C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105F50C malloc,memmove,CryptImportKey,free,CryptCreateHash,memset,CryptSetHashParam,CryptHashData,CryptGetHashParam,CryptDestroyHash,CryptDestroyKey,CryptDestroyHash,	0_2_00007FF6B105F50C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1058770 CryptHashData,free,CryptDestroyHash,free,free,CryptHashData,free,CryptDestroyHash,free,free,	0_2_00007FF6B1058770
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B10527B0 GetEnvironmentVariableA,LoadLibraryA,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,	0_2_00007FF6B10527B0
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1051024 GetEnvironmentVariableA,LoadLibraryA,CryptAcquireContextA,CryptAcquireContextA,atexit,	0_2_00007FF6B1051024
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105EA38 memset,memmove,memmove,memmove,BCryptImportKeyPair,BCryptExportKey,	0_2_00007FF6B105EA38
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105DA70 CryptDestroyKey,CryptDestroyKey,CryptDestroyKey,free,free,free,free,free,	0_2_00007FF6B105DA70
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105E144 free,BCryptDestroyKey,	0_2_00007FF6B105E144
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1052968 BCryptGenRandom,	0_2_00007FF6B1052968
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B10659B4 CryptReleaseContext,CryptReleaseContext,	0_2_00007FF6B10659B4
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B10659F8 BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,	0_2_00007FF6B10659F8
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1059438 CryptGetHashParam,	0_2_00007FF6B1059438
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1059CAC CryptHashData,CryptDuplicateHash,CryptDestroyHash,free,memmove,free,free,	0_2_00007FF6B1059CAC
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B10524A8 CryptStringToBinaryA,CryptStringToBinaryA,	0_2_00007FF6B10524A8
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105237C CryptBinaryToStringA,CryptBinaryToStringA,	0_2_00007FF6B105237C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105E3B0 BCryptDestroyKey,	0_2_00007FF6B105E3B0
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105A3B0 CryptDestroyKey,free,	0_2_00007FF6B105A3B0
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105E3EC BCryptDestroyKey,	0_2_00007FF6B105E3EC
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B10593D8 CryptCreateHash,	0_2_00007FF6B10593D8
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105940C CryptDestroyHash,	0_2_00007FF6B105940C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105E430 BCryptDestroyKey,free,	0_2_00007FF6B105E430
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105BC30 CryptGenRandom,inet_ntoa,free,inet_ntoa,free,free,free,free,free,free,free,	0_2_00007FF6B105BC30
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1052638 BCryptDestroyKey,	0_2_00007FF6B1052638
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105DE6C CryptDecodeObject,CryptImportKey,	0_2_00007FF6B105DE6C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105265C BCryptDestroyKey,free,	0_2_00007FF6B105265C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105E65C BCryptSecretAgreement,BCryptDeriveKey,BCryptDestroySecret,BCryptDestroyKey,	0_2_00007FF6B105E65C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B10596A0 CryptDestroyHash,CryptDestroyHash,CryptDestroyKey,CryptDestroyKey,free,	0_2_00007FF6B10596A0
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1058EF4 CryptHashData,CryptDestroyHash,	0_2_00007FF6B1058EF4
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105F6DC CryptDestroyHash,CryptDestroyKey,CryptDestroyHash,	0_2_00007FF6B105F6DC
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1052574 CryptGenRandom,	0_2_00007FF6B1052574
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105DD64 CryptDestroyKey,	0_2_00007FF6B105DD64
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1052600 BCryptDestroyKey,	0_2_00007FF6B1052600
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1056844 CryptDestroyKey,	0_2_00007FF6B1056844
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1056868 CryptDestroyKey,free,	0_2_00007FF6B1056868
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1059F44 CryptDuplicateHash,	0_2_00007FF6B1059F44
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105DF40 memmove,CryptEncrypt,	0_2_00007FF6B105DF40
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1059F88 memset,CryptSetKeyParam,	0_2_00007FF6B1059F88
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105979C CryptDestroyKey,	0_2_00007FF6B105979C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105E7C8 BCryptDestroyKey,free,	0_2_00007FF6B105E7C8
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B10597DC CryptDestroyKey,	0_2_00007FF6B10597DC
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105680C CryptDestroyKey,	0_2_00007FF6B105680C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105981C CryptDestroyKey,	0_2_00007FF6B105981C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105E824 memset,memmove,memmove,memmove,BCryptImportKeyPair,	0_2_00007FF6B105E824
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105A024 memmove,memmove,CryptEncrypt,	0_2_00007FF6B105A024

Source: Payload 94.75 (3).225.exe, 00000000.00000002.3877691046.0000018E38974000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: -----BEGIN RSA PUBLIC KEY-----

memstr_04ef40a9-d

Source: unknown	HTTPS traffic detected: 23.129.64.215:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.23.172.32:443 -> 192.168.2.5:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 202.61.204.198:443 -> 192.168.2.5:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.74.216:443 -> 192.168.2.5:50101 version: TLS 1.2

Source: Payload 94.75 (3).225.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 154.30.210.37 ports 0,1,3,4,5,15403

Found Tor onion address

Source: Payload 94.75 (3).225.exe	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff%s
Source: Payload 94.75 (3).225.exe, 00000000.00000000.2014250561.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000000.00000000.2014250561.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff%s
Source: Payload 94.75 (3).225.exe, 00000000.00000002.3877626385.0000018E38958000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000000.00000002.3877626385.0000018E38958000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdfft
Source: Payload 94.75 (3).225.exe, 00000000.00000002.3877626385.0000018E38958000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdffp
Source: Payload 94.75 (3).225.exe, 00000003.00000003.2474406478.000002329D8AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000003.00000003.2474406478.000002329D8AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff0,1723,I
Source: Payload 94.75 (3).225.exe, 00000003.00000003.2474406478.000002329D8AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff544,563,902-904,989-995,1194,1220,1293,1500,1533,1677,1723,4321,5222-52
Source: Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff235bac}
Source: Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff5664eea
Source: Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff,194,22)
Source: Payload 94.75 (3).225.exe, 00000003.00000000.2100378734.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000003.00000000.2100378734.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff%s
Source: Payload 94.75 (3).225.exe, 00000003.00000002.3878352117.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000003.00000002.3878352117.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff%s
Source: Payload 94.75 (3).225.exe, 00000005.00000000.2180541539.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000005.00000000.2180541539.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff%s
Source: Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff987,9990u
Source: Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff-81,88,(u
Source: Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff544,563,902-904,989-995,1194,1220,1293,1500,1533,1677,1723,4321,5222-52
Source: Payload 94.75 (3).225.exe, 00000005.00000002.3878365573.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000005.00000002.3878365573.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff%s

Source: unknown

Network traffic detected: IP country count 11

Source: global traffic	TCP traffic: 192.168.2.5:49705 -> 154.30.210.37:15403
Source: global traffic	TCP traffic: 192.168.2.5:49709 -> 87.162.115.145:9001
Source: global traffic	TCP traffic: 192.168.2.5:49710 -> 167.172.128.225:5268
Source: global traffic	TCP traffic: 192.168.2.5:49717 -> 185.220.101.72:9100
Source: global traffic	TCP traffic: 192.168.2.5:49718 -> 143.110.156.176:65535
Source: global traffic	TCP traffic: 192.168.2.5:49886 -> 130.61.142.133:9024
Source: global traffic	TCP traffic: 192.168.2.5:49907 -> 24.15.40.173:9046
Source: global traffic	TCP traffic: 192.168.2.5:49938 -> 185.173.93.47:9001
Source: global traffic	TCP traffic: 192.168.2.5:50013 -> 45.141.215.17:9000
Source: global traffic	TCP traffic: 192.168.2.5:50030 -> 54.39.234.91:9002
Source: global traffic	TCP traffic: 192.168.2.5:50047 -> 78.98.16.20:30443
Source: global traffic	TCP traffic: 192.168.2.5:50051 -> 57.128.220.185:9100
Source: global traffic	TCP traffic: 192.168.2.5:50055 -> 190.211.254.101:9001
Source: global traffic	TCP traffic: 192.168.2.5:50061 -> 45.141.215.21:9400
Source: global traffic	TCP traffic: 192.168.2.5:50077 -> 95.214.53.96:4443
Source: global traffic	TCP traffic: 192.168.2.5:50081 -> 185.220.101.155:10015
Source: global traffic	TCP traffic: 192.168.2.5:50085 -> 104.254.128.202:9002
Source: global traffic	TCP traffic: 192.168.2.5:50086 -> 71.19.148.104:9001
Source: global traffic	TCP traffic: 192.168.2.5:50096 -> 159.69.212.6:9001

Source: Joe Sandbox View

IP Address: 45.66.35.11 45.66.35.11

Source: Joe Sandbox View

JA3 fingerprint: c12f54a3f91dc7bafd92cb59fe009a35

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 172.202.163.200:443 -> 192.168.2.5:49745
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 4.245.163.56:443 -> 192.168.2.5:49947

Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/32d29da53a7d8b03fd7894018a011ef8a155c8c1 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/32d29da53a7d8b03fd7894018a011ef8a155c8c1 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/32d29da53a7d8b03fd7894018a011ef8a155c8c1 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/453d69bb809fc59ed0cad5d8399c27bc06deb424 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/29fc814416a16e0ade79d03651bb80734dd16fb6 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/453d69bb809fc59ed0cad5d8399c27bc06deb424 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/29fc814416a16e0ade79d03651bb80734dd16fb6 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/453d69bb809fc59ed0cad5d8399c27bc06deb424 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/29fc814416a16e0ade79d03651bb80734dd16fb6 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5d95800b6875192f7ca94383a47450b34b291e08 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3dfb8f9a878f44ed80e2b34f794fdf6334fc5f9 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5d95800b6875192f7ca94383a47450b34b291e08 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/68f09fe1cd22572d38980184d848ba456302c826 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5d95800b6875192f7ca94383a47450b34b291e08 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/68f09fe1cd22572d38980184d848ba456302c826 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/15450640183d6488afefa8b50ee8e91f64afe9ab HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5b41f18219bc9c3097491cc02a9ae8c9b2d955a4 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5b41f18219bc9c3097491cc02a9ae8c9b2d955a4 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5b41f18219bc9c3097491cc02a9ae8c9b2d955a4 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/26d8359bdf32a07604ce9fa14e6f1fea9364564b HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/6d07bbbf2bd760ca6acad1525fcc2e6c432cf622 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/6d07bbbf2bd760ca6acad1525fcc2e6c432cf622 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/54f33a3a16b6ea44f2db3627fc55753ce6c2249b HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/54f33a3a16b6ea44f2db3627fc55753ce6c2249b HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a2d63c32574a5376ec1e6cbae0abdb1538782541 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d54db93a10ce45b327ce6cfe6717a559ccbef650 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/090b83ba95a7e2d615d6799efd757de2ddc7d0fe HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/21c0c9ca51337a8593a0ef521121d4abb4deb662 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/21c0c9ca51337a8593a0ef521121d4abb4deb662 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/21c0c9ca51337a8593a0ef521121d4abb4deb662 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/396e6841f8450131b6b76544e38cea61187a1558 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/396e6841f8450131b6b76544e38cea61187a1558 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/396e6841f8450131b6b76544e38cea61187a1558 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45a2b5b65152a9876e1a9a74957848518d38fed1 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45a2b5b65152a9876e1a9a74957848518d38fed1 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0e29222ca653ce4f94fdbf8df16d2597d473ec74 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9faa9ceedff11fd68ac0cf389054a64ba1f3b034 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9faa9ceedff11fd68ac0cf389054a64ba1f3b034 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9faa9ceedff11fd68ac0cf389054a64ba1f3b034 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/301081df6a56b542710e5a19c893da910abd3c2f HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/301081df6a56b542710e5a19c893da910abd3c2f HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/74ad0c82407490b63aae2c1295102d8d58c4e257 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/74ad0c82407490b63aae2c1295102d8d58c4e257 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b05ac4e8b1e12a9fa9527e4bfa6d2a728931d34a HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/95545cba71ad21136c40c927f19c067ff128078f HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/95545cba71ad21136c40c927f19c067ff128078f HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/22cdc8de6be8a6e6ed4a9fadf66740b8f1a29de0 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c9368a555c2c31b9b610cf48de3c4647c84c51ef HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c9368a555c2c31b9b610cf48de3c4647c84c51ef HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c9368a555c2c31b9b610cf48de3c4647c84c51ef HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5c5a8caff797c413678d65a6b4b3f313dc796c75 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/87ca50cf8944f8f3793041d3598165a704de41cc HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/87ca50cf8944f8f3793041d3598165a704de41cc HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/cf1c1804c33cd69d8a75587fabc63d5d0e2980fa HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/87ca50cf8944f8f3793041d3598165a704de41cc HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dfb0a058b868f239c6b26681ad09a36f94517777 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dfb0a058b868f239c6b26681ad09a36f94517777 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dfb0a058b868f239c6b26681ad09a36f94517777 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:

Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Code function: 0_2_00007FF6B10561EC recv,WSAGetLastError,

0_2_00007FF6B10561EC

Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/32d29da53a7d8b03fd7894018a011ef8a155c8c1 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/32d29da53a7d8b03fd7894018a011ef8a155c8c1 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/32d29da53a7d8b03fd7894018a011ef8a155c8c1 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/453d69bb809fc59ed0cad5d8399c27bc06deb424 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/29fc814416a16e0ade79d03651bb80734dd16fb6 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/453d69bb809fc59ed0cad5d8399c27bc06deb424 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/29fc814416a16e0ade79d03651bb80734dd16fb6 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/453d69bb809fc59ed0cad5d8399c27bc06deb424 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/29fc814416a16e0ade79d03651bb80734dd16fb6 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5d95800b6875192f7ca94383a47450b34b291e08 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d3dfb8f9a878f44ed80e2b34f794fdf6334fc5f9 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5d95800b6875192f7ca94383a47450b34b291e08 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/68f09fe1cd22572d38980184d848ba456302c826 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5d95800b6875192f7ca94383a47450b34b291e08 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/68f09fe1cd22572d38980184d848ba456302c826 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/15450640183d6488afefa8b50ee8e91f64afe9ab HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5b41f18219bc9c3097491cc02a9ae8c9b2d955a4 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5b41f18219bc9c3097491cc02a9ae8c9b2d955a4 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5b41f18219bc9c3097491cc02a9ae8c9b2d955a4 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/26d8359bdf32a07604ce9fa14e6f1fea9364564b HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/6d07bbbf2bd760ca6acad1525fcc2e6c432cf622 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/6d07bbbf2bd760ca6acad1525fcc2e6c432cf622 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/54f33a3a16b6ea44f2db3627fc55753ce6c2249b HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/54f33a3a16b6ea44f2db3627fc55753ce6c2249b HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a2d63c32574a5376ec1e6cbae0abdb1538782541 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d54db93a10ce45b327ce6cfe6717a559ccbef650 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/090b83ba95a7e2d615d6799efd757de2ddc7d0fe HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/21c0c9ca51337a8593a0ef521121d4abb4deb662 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/21c0c9ca51337a8593a0ef521121d4abb4deb662 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/21c0c9ca51337a8593a0ef521121d4abb4deb662 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/396e6841f8450131b6b76544e38cea61187a1558 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/396e6841f8450131b6b76544e38cea61187a1558 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/396e6841f8450131b6b76544e38cea61187a1558 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45a2b5b65152a9876e1a9a74957848518d38fed1 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/45a2b5b65152a9876e1a9a74957848518d38fed1 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0e29222ca653ce4f94fdbf8df16d2597d473ec74 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9faa9ceedff11fd68ac0cf389054a64ba1f3b034 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9faa9ceedff11fd68ac0cf389054a64ba1f3b034 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9faa9ceedff11fd68ac0cf389054a64ba1f3b034 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/301081df6a56b542710e5a19c893da910abd3c2f HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/301081df6a56b542710e5a19c893da910abd3c2f HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/74ad0c82407490b63aae2c1295102d8d58c4e257 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/74ad0c82407490b63aae2c1295102d8d58c4e257 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b05ac4e8b1e12a9fa9527e4bfa6d2a728931d34a HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/95545cba71ad21136c40c927f19c067ff128078f HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/95545cba71ad21136c40c927f19c067ff128078f HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/22cdc8de6be8a6e6ed4a9fadf66740b8f1a29de0 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c9368a555c2c31b9b610cf48de3c4647c84c51ef HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c9368a555c2c31b9b610cf48de3c4647c84c51ef HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c9368a555c2c31b9b610cf48de3c4647c84c51ef HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5c5a8caff797c413678d65a6b4b3f313dc796c75 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/87ca50cf8944f8f3793041d3598165a704de41cc HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/87ca50cf8944f8f3793041d3598165a704de41cc HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/cf1c1804c33cd69d8a75587fabc63d5d0e2980fa HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/87ca50cf8944f8f3793041d3598165a704de41cc HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dfb0a058b868f239c6b26681ad09a36f94517777 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dfb0a058b868f239c6b26681ad09a36f94517777 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dfb0a058b868f239c6b26681ad09a36f94517777 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8Accept-Language: en-US,en;q=0.5Data Raw: 00 Data Ascii:

Source: Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000003.00000000.2100378734.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000003.00000002.3878352117.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000005.00000000.2180541539.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000005.00000002.3878365573.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff
Source: Payload 94.75 (3).225.exe, 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000000.00000000.2014250561.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000003.00000000.2100378734.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000003.00000002.3878352117.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000005.00000000.2180541539.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000005.00000002.3878365573.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff%s
Source: Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff-81
Source: Payload 94.75 (3).225.exe, 00000003.00000003.2474406478.000002329D8AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff0
Source: Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff235bac
Source: Payload 94.75 (3).225.exe, 00000003.00000003.2474406478.000002329D8AD000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff544
Source: Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff5664eea
Source: Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdff987
Source: Payload 94.75 (3).225.exe, 00000000.00000002.3877626385.0000018E38958000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdffp
Source: Payload 94.75 (3).225.exe, 00000000.00000002.3877626385.0000018E38958000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?smbdfft
Source: Payload 94.75 (3).225.exe, 00000000.00000002.3877691046.0000018E38974000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000002.3877128242.0000018E379E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dfri.se
Source: Payload 94.75 (3).225.exe, 00000005.00000002.3877853493.000001A00246C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://prsv.ch/
Source: Payload 94.75 (3).225.exe, 00000003.00000002.3876940223.000002329D5C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://quetzalcoatl-relays.org
Source: Payload 94.75 (3).225.exe, 00000003.00000002.3876940223.000002329D5C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://quetzalcoatl-relays.org/#support-us
Source: Payload 94.75 (3).225.exe, 00000000.00000003.2049015313.0000018E38292000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2050699627.0000018E379E6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2050449141.0000018E38594000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2051711241.0000018E379E6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2050797411.0000018E38260000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2054381478.0000018E37F38000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2047336892.0000018E38091000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2044147682.0000018E37F33000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000003.00000003.2104918114.000002329CF41000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000003.00000003.2102172436.000002329D27C000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000003.00000003.2103032934.000002329CBF6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000005.00000003.2183189629.000001A00174B000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000005.00000003.2184411283.000001A07FC76000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000005.00000003.2187115628.000001A001411000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sabotage.net
Source: Payload 94.75 (3).225.exe, 00000000.00000002.3877422117.0000018E37F2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://torix-relays.org
Source: Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tuxli.org/

Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: unknown	HTTPS traffic detected: 23.129.64.215:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 94.23.172.32:443 -> 192.168.2.5:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 202.61.204.198:443 -> 192.168.2.5:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.74.216:443 -> 192.168.2.5:50101 version: TLS 1.2

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105A194 memmove,CryptImportKey,	0_2_00007FF6B105A194
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105F50C malloc,memmove,CryptImportKey,free,CryptCreateHash,memset,CryptSetHashParam,CryptHashData,CryptGetHashParam,CryptDestroyHash,CryptDestroyKey,CryptDestroyHash,	0_2_00007FF6B105F50C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105EA38 memset,memmove,memmove,memmove,BCryptImportKeyPair,BCryptExportKey,	0_2_00007FF6B105EA38
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105DE6C CryptDecodeObject,CryptImportKey,	0_2_00007FF6B105DE6C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B105E824 memset,memmove,memmove,memmove,BCryptImportKeyPair,	0_2_00007FF6B105E824

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B10527B0	0_2_00007FF6B10527B0
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1057964	0_2_00007FF6B1057964
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1052B6C	0_2_00007FF6B1052B6C
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Code function: 0_2_00007FF6B1053E20	0_2_00007FF6B1053E20

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Code function: String function: 00007FF6B1051720 appears 101 times

Source: classification engine

Classification label: mal76.troj.evad.winEXE@6/1@0/29

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe

File created: C:\Users\user\Desktop\cached-consensus

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6644:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6536:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:616:120:WilError_03

Source: Payload 94.75 (3).225.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Payload 94.75 (3).225.exe	Virustotal: Detection: 80%
Source: Payload 94.75 (3).225.exe	ReversingLabs: Detection: 81%

Source: unknown	Process created: C:\Users\user\Desktop\Payload 94.75 (3).225.exe "C:\Users\user\Desktop\Payload 94.75 (3).225.exe"
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\Desktop\Payload 94.75 (3).225.exe "C:\Users\user\Desktop\Payload 94.75 (3).225.exe"
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\Desktop\Payload 94.75 (3).225.exe "C:\Users\user\Desktop\Payload 94.75 (3).225.exe"
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: dssenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: dssenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: dssenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Section loaded: ncryptsslp.dll	Jump to behavior

Source: Payload 94.75 (3).225.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: Payload 94.75 (3).225.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: Payload 94.75 (3).225.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run nzppj427v4			Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run nzppj427v4			Jump to behavior

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe TID: 6188	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe TID: 6188	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe TID: 5416	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe TID: 6548	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: Payload 94.75 (3).225.exe, 00000003.00000002.3876720308.000002329B302000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Payload 94.75 (3).225.exe, 00000000.00000002.3876744631.0000018E35FFC000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000005.00000002.3877962204.000001A07F528000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Code function: 0_2_00007FF6B1051720 GetCurrentThreadId,GetLocalTime,_cwprintf_s_l,

0_2_00007FF6B1051720

Source: C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	12 Archive Collected Data	22 Encrypted Channel	Exfiltration Over Other Network Medium	1 Data Encrypted for Impact
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	11 Virtualization/Sandbox Evasion	LSASS Memory	1 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Process Injection	Security Account Manager	11 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	3 System Information Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	12 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	1 Proxy	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Payload 94.75 (3).225.exe	81%	Virustotal		Browse
Payload 94.75 (3).225.exe	82%	ReversingLabs	Win64.Trojan.Multiverze
Payload 94.75 (3).225.exe	100%	Avira	HEUR/AGEN.1358352
Payload 94.75 (3).225.exe	100%	Joe Sandbox ML

Name	Malicious	Reputation
http://193.23.244.244/tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee	false	unknown
http://45.66.35.11/tor/server/fp/d3dfb8f9a878f44ed80e2b34f794fdf6334fc5f9	false	unknown
http://216.218.219.41/tor/server/fp/396e6841f8450131b6b76544e38cea61187a1558	false	unknown
http://216.218.219.41/tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a	false	unknown
http://193.23.244.244/tor/server/fp/5c5a8caff797c413678d65a6b4b3f313dc796c75	false	unknown
http://45.66.35.11/tor/server/fp/68f09fe1cd22572d38980184d848ba456302c826	false	unknown
http://216.218.219.41/tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077	false	unknown
http://216.218.219.41/tor/server/fp/32d29da53a7d8b03fd7894018a011ef8a155c8c1	false	unknown
http://193.23.244.244/tor/server/fp/453d69bb809fc59ed0cad5d8399c27bc06deb424	false	unknown
http://216.218.219.41/tor/server/fp/29fc814416a16e0ade79d03651bb80734dd16fb6	false	unknown
http://216.218.219.41/tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e	false	unknown
http://193.23.244.244/tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac	false	unknown
http://216.218.219.41/tor/server/fp/c9368a555c2c31b9b610cf48de3c4647c84c51ef	false	unknown
http://45.66.35.11/tor/server/fp/d54db93a10ce45b327ce6cfe6717a559ccbef650	false	unknown
http://216.218.219.41/tor/server/fp/22cdc8de6be8a6e6ed4a9fadf66740b8f1a29de0	false	unknown
http://193.23.244.244/tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d	false	unknown
http://193.23.244.244/tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077	false	unknown
http://45.66.35.11/tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e	false	unknown
http://216.218.219.41/tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac	false	unknown
http://45.66.35.11/tor/server/fp/54f33a3a16b6ea44f2db3627fc55753ce6c2249b	false	unknown
http://45.66.35.11/tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d	false	unknown
http://216.218.219.41/tor/server/fp/45a2b5b65152a9876e1a9a74957848518d38fed1	false	unknown
http://193.23.244.244/tor/server/fp/68f09fe1cd22572d38980184d848ba456302c826	false	unknown
http://45.66.35.11/tor/server/fp/c9368a555c2c31b9b610cf48de3c4647c84c51ef	false	unknown
http://193.23.244.244/tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908	false	unknown
http://216.218.219.41/tor/server/fp/dfb0a058b868f239c6b26681ad09a36f94517777	false	unknown
http://216.218.219.41/tor/server/fp/5d95800b6875192f7ca94383a47450b34b291e08	false	unknown
http://45.66.35.11/tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac	false	unknown
http://45.66.35.11/tor/server/fp/95545cba71ad21136c40c927f19c067ff128078f	false	unknown
http://216.218.219.41/tor/server/fp/26d8359bdf32a07604ce9fa14e6f1fea9364564b	false	unknown
http://193.23.244.244/tor/server/fp/74ad0c82407490b63aae2c1295102d8d58c4e257	false	unknown
http://216.218.219.41/tor/server/fp/15450640183d6488afefa8b50ee8e91f64afe9ab	false	unknown
http://193.23.244.244/tor/server/fp/54f33a3a16b6ea44f2db3627fc55753ce6c2249b	false	unknown
http://45.66.35.11/tor/server/fp/21c0c9ca51337a8593a0ef521121d4abb4deb662	false	unknown
http://193.23.244.244/tor/server/fp/b05ac4e8b1e12a9fa9527e4bfa6d2a728931d34a	false	unknown
http://45.66.35.11/tor/server/fp/a2d63c32574a5376ec1e6cbae0abdb1538782541	false	unknown
http://45.66.35.11/tor/server/fp/cf1c1804c33cd69d8a75587fabc63d5d0e2980fa	false	unknown
http://193.23.244.244/tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e	false	unknown
http://45.66.35.11/tor/server/fp/5b41f18219bc9c3097491cc02a9ae8c9b2d955a4	false	unknown
http://216.218.219.41/tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d	false	unknown
http://216.218.219.41/tor/server/fp/87ca50cf8944f8f3793041d3598165a704de41cc	false	unknown
http://45.66.35.11/tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908	false	unknown
http://193.23.244.244/tor/status-vote/current/consensus	false	unknown
http://45.66.35.11/tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077	false	unknown
http://193.23.244.244/tor/server/fp/21c0c9ca51337a8593a0ef521121d4abb4deb662	false	unknown
http://216.218.219.41/tor/server/fp/9faa9ceedff11fd68ac0cf389054a64ba1f3b034	false	unknown
http://216.218.219.41/tor/server/fp/453d69bb809fc59ed0cad5d8399c27bc06deb424	false	unknown
http://216.218.219.41/tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee	false	unknown
http://193.23.244.244/tor/server/fp/301081df6a56b542710e5a19c893da910abd3c2f	false	unknown
http://216.218.219.41/tor/server/fp/6d07bbbf2bd760ca6acad1525fcc2e6c432cf622	false	unknown
http://193.23.244.244/tor/server/fp/29fc814416a16e0ade79d03651bb80734dd16fb6	false	unknown
http://193.23.244.244/tor/server/fp/32d29da53a7d8b03fd7894018a011ef8a155c8c1	false	unknown
http://193.23.244.244/tor/server/fp/95545cba71ad21136c40c927f19c067ff128078f	false	unknown
http://193.23.244.244/tor/server/fp/396e6841f8450131b6b76544e38cea61187a1558	false	unknown
http://45.66.35.11/tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee	false	unknown
http://216.218.219.41/tor/server/fp/0e29222ca653ce4f94fdbf8df16d2597d473ec74	false	unknown
http://193.23.244.244/tor/server/fp/5d95800b6875192f7ca94383a47450b34b291e08	false	unknown
http://193.23.244.244/tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a	false	unknown
http://193.23.244.244/tor/server/fp/9faa9ceedff11fd68ac0cf389054a64ba1f3b034	false	unknown
http://193.23.244.244/tor/server/fp/dfb0a058b868f239c6b26681ad09a36f94517777	false	unknown
http://45.66.35.11/tor/server/fp/6d07bbbf2bd760ca6acad1525fcc2e6c432cf622	false	unknown
http://45.66.35.11/tor/server/fp/301081df6a56b542710e5a19c893da910abd3c2f	false	unknown
http://216.218.219.41/tor/server/fp/74ad0c82407490b63aae2c1295102d8d58c4e257	false	unknown
http://216.218.219.41/tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908	false	unknown
http://45.66.35.11/tor/server/fp/090b83ba95a7e2d615d6799efd757de2ddc7d0fe	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://pm2pavba27wr4m34.onion/command.txt?smbdff0	Payload 94.75 (3).225.exe, 00000003.00000003.2474406478.000002329D8AD000.00000004.00000020.00020000.00000000.sdmp	true	unknown
https://dfri.se	Payload 94.75 (3).225.exe, 00000000.00000002.3877691046.0000018E38974000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000002.3877128242.0000018E379E5000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://quetzalcoatl-relays.org/#support-us	Payload 94.75 (3).225.exe, 00000003.00000002.3876940223.000002329D5C0000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://pm2pavba27wr4m34.onion/command.txt?smbdff5664eea	Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?smbdff	Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000003.00000000.2100378734.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000003.00000002.3878352117.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000005.00000000.2180541539.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000005.00000002.3878365573.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	true	unknown
https://prsv.ch/	Payload 94.75 (3).225.exe, 00000005.00000002.3877853493.000001A00246C000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://pm2pavba27wr4m34.onion/command.txt?smbdff-81	Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?smbdfft	Payload 94.75 (3).225.exe, 00000000.00000002.3877626385.0000018E38958000.00000004.00000020.00020000.00000000.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?smbdffp	Payload 94.75 (3).225.exe, 00000000.00000002.3877626385.0000018E38958000.00000004.00000020.00020000.00000000.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?smbdff544	Payload 94.75 (3).225.exe, 00000003.00000003.2474406478.000002329D8AD000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?smbdff235bac	Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?smbdff987	Payload 94.75 (3).225.exe, 00000005.00000002.3876813270.000001A001C79000.00000004.00000020.00020000.00000000.sdmp	true	unknown
https://tuxli.org/	Payload 94.75 (3).225.exe, 00000003.00000002.3877285728.000002329D8A9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://pm2pavba27wr4m34.onion/command.txt?smbdff%s	Payload 94.75 (3).225.exe, 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000000.00000000.2014250561.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000003.00000000.2100378734.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000003.00000002.3878352117.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000005.00000000.2180541539.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (3).225.exe, 00000005.00000002.3878365573.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmp	true	unknown
https://quetzalcoatl-relays.org	Payload 94.75 (3).225.exe, 00000003.00000002.3876940223.000002329D5C0000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://torix-relays.org	Payload 94.75 (3).225.exe, 00000000.00000002.3877422117.0000018E37F2A000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://sabotage.net	Payload 94.75 (3).225.exe, 00000000.00000003.2049015313.0000018E38292000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2050699627.0000018E379E6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2050449141.0000018E38594000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2051711241.0000018E379E6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2050797411.0000018E38260000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2054381478.0000018E37F38000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2047336892.0000018E38091000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000000.00000003.2044147682.0000018E37F33000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000003.00000003.2104918114.000002329CF41000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000003.00000003.2102172436.000002329D27C000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000003.00000003.2103032934.000002329CBF6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000005.00000003.2183189629.000001A00174B000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000005.00000003.2184411283.000001A07FC76000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (3).225.exe, 00000005.00000003.2187115628.000001A001411000.00000004.00000020.00020000.00000000.sdmp	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
54.39.234.91	unknown	Canada	16276	OVHFR	false
185.220.101.155	unknown	Germany	208294	ASMKNL	false
45.141.215.17	unknown	Netherlands	62068	SPECTRAIPSpectraIPBVNL	false
78.98.16.20	unknown	Slovakia (SLOVAK Republic)	6855	SK-TELEKOMSK	false
104.254.128.202	unknown	United States	29802	HVC-ASUS	false
190.211.254.101	unknown	Panama	51852	PLI-ASCH	false
192.42.116.218	unknown	Netherlands	1101	IP-EEND-ASIP-EENDBVNL	false
202.61.204.198	unknown	Australia	4842	TH-AS-APTianhaiInfoTechCN	false
95.214.53.96	unknown	Poland	201814	PL-SKYTECH-ASPL	false
192.53.171.194	unknown	United States	553	BELWUEBelWue-KoordinationEU	false
216.218.219.41	unknown	United States	6939	HURRICANEUS	false
143.110.156.176	unknown	United States	30376	COLLEGE-OF-ST-SCHOLASTICAUS	true
130.61.142.133	unknown	United States	31898	ORACLE-BMC-31898US	false
24.15.40.173	unknown	United States	7922	COMCAST-7922US	false
45.66.35.11	unknown	Netherlands	47482	SPECTRENL	false
57.128.220.185	unknown	Belgium	2686	ATGS-MMD-ASUS	false
154.30.210.37	unknown	United States	395111	KVCNET-2009US	true
45.141.215.21	unknown	Netherlands	62068	SPECTRAIPSpectraIPBVNL	false
45.141.215.40	unknown	Netherlands	62068	SPECTRAIPSpectraIPBVNL	false
167.172.128.225	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
162.247.74.216	unknown	United States	4224	CALYX-ASUS	false
23.129.64.215	unknown	United States	396507	EMERALD-ONIONUS	false
159.69.212.6	unknown	Germany	24940	HETZNER-ASDE	false
71.19.148.104	unknown	United States	47066	PRGMRUS	false
94.23.172.32	unknown	France	16276	OVHFR	false
87.162.115.145	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
185.220.101.72	unknown	Germany	208294	ASMKNL	false
185.173.93.47	unknown	Russian Federation	57494	ADMAN-ASRU	false
193.23.244.244	unknown	Germany	50472	CHAOS-ASDE	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1547865
Start date and time:	2024-11-03 09:40:41 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Payload 94.75 (3).225.exe
Detection:	MAL
Classification:	mal76.troj.evad.winEXE@6/1@0/29
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 59 Number of non-executed functions: 50
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
09:41:29	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run nzppj427v4 C:\Users\user\Desktop\Payload 94.75 (3).225.exe
09:41:37	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run nzppj427v4 C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
45.66.35.11	Payload 94.75 (4).225.exe	Get hash	malicious	Kronos, Strela Stealer	Browse	45.66.35.11/tor/server/fp/7502c6382100a6ff1d40dc3546733116ffd66576
45.66.35.11	Payload 94.75 (2).225.exe	Get hash	malicious	Unknown	Browse	45.66.35.11/tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce
190.211.254.101	Ovolohotels-BAD-LINK.html	Get hash	malicious	HTMLPhisher	Browse
190.211.254.101	malicious.js	Get hash	malicious	HTMLPhisher	Browse
95.214.53.96	file.exe	Get hash	malicious	BazaLoader	Browse
	2y8Gf0bLih.exe	Get hash	malicious	Unknown	Browse
	conhost.exe	Get hash	malicious	Unknown	Browse
54.39.234.91	aif31Spjyi.exe	Get hash	malicious	Glupteba, SmokeLoader	Browse
216.218.219.41	Payload 94.75 (4).225.exe	Get hash	malicious	Kronos, Strela Stealer	Browse	216.218.219.41/tor/server/fp/d7316bf7fd633dd7474b18c33e1d5fdeb04d26a7
216.218.219.41	Payload 94.75 (2).225.exe	Get hash	malicious	Unknown	Browse	216.218.219.41/tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce
104.254.128.202	file.exe	Get hash	malicious	Quasar, WhiteSnake Stealer	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SPECTRAIPSpectraIPBVNL	Payload 94.75 (2).225.exe	Get hash	malicious	Unknown	Browse	45.141.215.21
	Payload 94.75.225.exe	Get hash	malicious	Unknown	Browse	45.141.215.61
	https://alcatrazpackages.com/elchapo.html	Get hash	malicious	Unknown	Browse	45.87.42.74
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	45.141.201.6
	na.elf	Get hash	malicious	Unknown	Browse	45.142.6.235
	SecuriteInfo.com.Win32.Malware-gen.18298.24659.exe	Get hash	malicious	Remcos	Browse	45.138.16.208
	https://storage.webfiledata.com	Get hash	malicious	Unknown	Browse	45.130.201.24
	http://storage.webfiledata.com	Get hash	malicious	Unknown	Browse	45.130.201.24
	PO-LIST.exe	Get hash	malicious	Remcos	Browse	45.138.16.248
OVHFR	Payload 94.75 (4).225.exe	Get hash	malicious	Kronos, Strela Stealer	Browse	158.69.205.247
	Payload 94.75 (2).225.exe	Get hash	malicious	Unknown	Browse	144.217.4.166
	Payload 94.75.225.exe	Get hash	malicious	Unknown	Browse	51.81.56.136
	4GPlus.bat	Get hash	malicious	Unknown	Browse	51.195.251.11
	Reservation Detail Booking.com ID4336.vbs	Get hash	malicious	AsyncRAT, PureLog Stealer, zgRAT	Browse	94.23.17.185
	aba.bat	Get hash	malicious	Unknown	Browse	51.195.251.11
	park.bat	Get hash	malicious	Unknown	Browse	51.195.251.11
	ICBM.exe	Get hash	malicious	Xmrig	Browse	51.210.150.92
	nuklear.arm.elf	Get hash	malicious	Mirai	Browse	198.27.68.52
SK-TELEKOMSK	belks.arm7.elf	Get hash	malicious	Mirai	Browse	95.103.237.4
	belks.mpsl.elf	Get hash	malicious	Mirai	Browse	95.103.237.7
	belks.spc.elf	Get hash	malicious	Mirai	Browse	95.102.255.80
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse	78.99.63.19
	ppc.elf	Get hash	malicious	Mirai	Browse	84.47.124.166
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	78.98.240.173
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	178.40.197.87
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	213.81.135.186
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	178.40.197.66
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	195.91.5.62
ASMKNL	Payload 94.75 (2).225.exe	Get hash	malicious	Unknown	Browse	185.220.101.3
	Payload 94.75.225.exe	Get hash	malicious	Unknown	Browse	185.220.101.21
	8QBpLkbY6i.exe	Get hash	malicious	WhiteSnake Stealer	Browse	185.220.101.7
	17dDkWbjoz.exe	Get hash	malicious	PureLog Stealer	Browse	185.220.101.202
	47CkiftRs9.exe	Get hash	malicious	Unknown	Browse	185.220.101.144
	A2G6pO40qG.exe	Get hash	malicious	CMSBrute	Browse	185.220.101.201
	jXBjxhHQgR.exe	Get hash	malicious	CMSBrute	Browse	185.220.101.211
	c8sDO7umrx.exe	Get hash	malicious	CMSBrute	Browse	185.220.101.1
	PHHOjspjmp.exe	Get hash	malicious	CMSBrute	Browse	185.220.101.20
	Mcb5K3TOWT.exe	Get hash	malicious	Unknown	Browse	185.220.101.20

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
c12f54a3f91dc7bafd92cb59fe009a35	Payload 94.75 (4).225.exe	Get hash	malicious	Kronos, Strela Stealer	Browse	23.129.64.215 94.23.172.32 202.61.204.198 162.247.74.216
	Payload 94.75 (2).225.exe	Get hash	malicious	Unknown	Browse	23.129.64.215 94.23.172.32 202.61.204.198 162.247.74.216
	dnlib.exe	Get hash	malicious	Unknown	Browse	23.129.64.215 94.23.172.32 202.61.204.198 162.247.74.216
	2y0EV2jtyQ.exe	Get hash	malicious	Unknown	Browse	23.129.64.215 94.23.172.32 202.61.204.198 162.247.74.216
	SecuriteInfo.com.Win32.BankerX-gen.16604.2792.exe	Get hash	malicious	Unknown	Browse	23.129.64.215 94.23.172.32 202.61.204.198 162.247.74.216
	FileViewer.exe	Get hash	malicious	Unknown	Browse	23.129.64.215 94.23.172.32 202.61.204.198 162.247.74.216
	a6pN09gwZj.exe	Get hash	malicious	Unknown	Browse	23.129.64.215 94.23.172.32 202.61.204.198 162.247.74.216
	a6pN09gwZj.exe	Get hash	malicious	Unknown	Browse	23.129.64.215 94.23.172.32 202.61.204.198 162.247.74.216
	fL271NVAru.exe	Get hash	malicious	Unknown	Browse	23.129.64.215 94.23.172.32 202.61.204.198 162.247.74.216

Process:	C:\Users\user\Desktop\Payload 94.75 (3).225.exe
File Type:	ASCII text, with very long lines (1006)
Category:	dropped
Size (bytes):	3296473
Entropy (8bit):	5.5421154662066945
Encrypted:	false
SSDEEP:	12288:t11oJxhm/Dbzbs/oP/vfdsdUGzfsCTThFUV:t18mrrP4bHhmV
MD5:	E9A143769F1CA9ACB40E3D853C07F4D5
SHA1:	034FFE12AF7C7954321BB1FDDF3F13E4AA966420
SHA-256:	30DBD09F00A52DE2FB9D9ED38C366595B5022D4BF035DCC1EBEC8767213F7D46
SHA-512:	25710C2CEC3093289B357658F9ADB58F55A2236B740BF512DDEE71420C9D76CB3EE4D4499760E1729EF08E3B6683488B00DB87544C20D795E5538ABB89334A1A
Malicious:	false
Reputation:	low
Preview:	network-status-version 3.vote-status consensus.consensus-method 33.valid-after 2024-11-03 08:00:00.fresh-until 2024-11-03 09:00:00.valid-until 2024-11-03 11:00:00.voting-delay 300 300.client-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13.server-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13.known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2.recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2.required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.para

Static File Info

General

File type:	PE32+ executable (console) x86-64, for MS Windows
Entropy (8bit):	6.073167450633743
TrID:	Win64 Executable Console (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Payload 94.75 (3).225.exe
File size:	134'154 bytes
MD5:	702eb701c63b9e10c77e704392d1e924
SHA1:	dbb6860f07624510de93f7ee8cd85200d79e7724
SHA256:	4a7d98590befe7f48428ee7a1017f74cb36aefb96a7ceff59a630c1c1b472439
SHA512:	dcd7176c26e83c425added2423ff13809aaff7c52dfccd11dffa03ea01ed206857c865bf8be0693b52d0627d6b6fb86887ed044c73f32fa1966c4ee3a0792791
SSDEEP:	1536:BL+O/U7OBmKGS6CBK0t/ZCXPGuxgDM5YKBGNc/xf6KWcs8+SUkIcekqY1o/uImzx:BLxUyjp3xCTyDMsUWyw+Ubx7Ny
TLSH:	4CD34B7D3DA881F6C0A6C47A92D5CE42F3B2B4020F399B5F05D2572E4F376A19F29126
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L..2..la..la..la..m`..lam.m`..la..mab.laZ.o`..la..e`6.la..n`..laRich..la........................PE..d....7._.........."......L.

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x140002348
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x5FED3795 [Thu Dec 31 02:29:41 2020 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	1e6846ec68cd8341fea5c898085896c4

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007F7FF0DAB87Ch
call 00007F7FF0DAB90Bh
call 00007F7FF0DAA7EAh
int3
xor eax, eax
ret
int3
dec eax
sub esp, 38h
dec eax
mov dword ptr [esp+20h], FFFFFFFEh
call dword ptr [00013F3Dh]
nop
dec eax
add esp, 38h
ret
int3
int3
int3
dec esp
mov ebx, esp
dec ecx
mov dword ptr [ebx+08h], ecx
push edi
dec eax
sub esp, 40h
dec ecx
mov dword ptr [ebx-10h], FFFFFFFEh
dec ecx
mov dword ptr [ebx+18h], ebx
dec eax
mov ebx, edx
dec eax
mov edi, ecx
xor eax, eax
mov dword ptr [esp+30h], eax
dec eax
mov dword ptr [ecx+08h], eax
dec eax
mov dword ptr [ecx+10h], eax
dec eax
mov dword ptr [ecx+18h], eax
mov dword ptr [esp+30h], 00000001h
dec ecx
mov dword ptr [ebx+10h], eax
mov edx, dword ptr [edx+08h]
sub edx, dword ptr [ebx]
dec ecx
lea eax, dword ptr [ebx+10h]
dec ecx
mov dword ptr [ebx-28h], eax
inc ebp
xor ecx, ecx
inc ecx
mov eax, 4000000Ch
dec eax
mov ecx, dword ptr [ebx]
call dword ptr [00013CC1h]
dec eax
mov edx, dword ptr [esp+58h]
dec eax
dec edx
dec eax
mov ecx, edi
call 00007F7FF0DAB1CEh
dec esp
mov ecx, dword ptr [edi+08h]
dec eax
mov edx, dword ptr [ebx+08h]
dec eax
sub edx, dword ptr [ebx]
dec ecx
mov eax, ecx
dec eax
neg eax
dec ebp
sbb edx, edx
dec esp
and dword ptr [esp+58h], edx
dec eax
lea eax, dword ptr [esp+58h]
dec eax
mov dword ptr [esp+20h], eax
inc ecx
mov eax, 4000000Ch

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1f850	0xc8	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x22000	0x1230	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x24000	0x15c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x1a870	0x38	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x16000	0x320	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x14b90	0x14c00	eef5c59a66c6d0195b0e34d347718eef	False	0.4915050828313253	data	6.275185257158835	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x16000	0xa220	0xa400	1a44ac11142a6f22c1dfaa49114fce7a	False	0.3656154725609756	data	4.784931342645706	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x21000	0x458	0x200	fe947f3474c7297905847e989f6facd9	False	0.0546875	Matlab v4 mat-file (little endian) \377\377\377\377, text, rows 1, columns 0	0.15842690200323517	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x22000	0x1230	0x1400	4b9c71d34694b541d5cfea810671a51b	False	0.453125	data	4.754125401387386	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x24000	0x15c	0x200	0564e022ec89fb8037158f3d3822c796	False	0.541015625	data	4.171928238411319	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Imports

DLL	Import
bcrypt.dll	BCryptGenRandom, BCryptSetProperty, BCryptCloseAlgorithmProvider, BCryptOpenAlgorithmProvider, BCryptSecretAgreement, BCryptImportKeyPair, BCryptDestroySecret, BCryptDeriveKey, BCryptExportKey, BCryptDestroyKey
CRYPT32.dll	CryptBinaryToStringA, CryptStringToBinaryA, CryptDecodeObject
WS2_32.dll	WSACleanup, inet_addr, inet_ntoa, closesocket, gethostbyname, WSAStartup, send, socket, connect, recv, htons, setsockopt, WSAGetLastError
Secur32.dll	InitSecurityInterfaceA
KERNEL32.dll	CreateThread, TerminateThread, GetModuleFileNameA, Sleep, GetConsoleWindow, GetConsoleScreenBufferInfo, SetConsoleTextAttribute, GetStdHandle, GetCurrentThreadId, GetLocalTime, GetTickCount, GetCommandLineW, LocalFree, GetEnvironmentVariableA, LoadLibraryA, ReadFile, WriteFile, SetFilePointer, GetFileAttributesA, CreateFileA, CloseHandle, GetFileSize, FlushFileBuffers, WaitForSingleObject, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection
USER32.dll	ShowWindow
ADVAPI32.dll	RegEnumValueA, RegSetValueExA, CryptSetHashParam, CryptDuplicateHash, CryptEncrypt, CryptSetKeyParam, CryptImportKey, CryptDestroyKey, CryptCreateHash, CryptHashData, CryptDestroyHash, RegQueryInfoKeyA, RegCloseKey, CryptReleaseContext, RegOpenKeyExA, CryptGetHashParam, CryptGenRandom, CryptAcquireContextA
SHELL32.dll	CommandLineToArgvW
msvcrt.dll	__CxxFrameHandler3, atexit, vprintf, free, malloc, vsprintf_s, _vscprintf, sscanf, _mkgmtime, time, wcstombs, memmove, memchr, memcmp, memcpy, memset

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-03T09:41:52.750407+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	172.202.163.200	443	192.168.2.5	49745	TCP
2024-11-03T09:42:32.081538+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	4.245.163.56	443	192.168.2.5	49947	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 3, 2024 09:41:30.144215107 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:30.149147034 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:30.149235964 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:30.149296045 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:30.154061079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.212903976 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.212925911 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.212939024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.212974072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.212985039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.212996960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.213007927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.213020086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.213031054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.213042974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.213049889 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.213100910 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.217935085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.217998028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.218054056 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.359849930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.370811939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.370825052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.370840073 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.370848894 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.370855093 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.371010065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.371191025 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.371203899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.371215105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.371244907 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.371552944 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.371566057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.371576071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.371593952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.371607065 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.371607065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.371627092 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.371659040 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.372416973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.372428894 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.372440100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.372452974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.372464895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.372464895 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.372498989 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.375886917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.375905991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.375929117 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.423826933 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.528718948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.528740883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.528753042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.528764009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.528775930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.528788090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.528788090 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.528800964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.528866053 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.529026031 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.529073000 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.529141903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.529154062 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.529165030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.529175997 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.529182911 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.529186964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.529206038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.529213905 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.529262066 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.530004025 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530016899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530028105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530062914 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.530065060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530076981 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530087948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530100107 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530112982 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.530133009 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.530886889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530898094 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530909061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530927896 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530937910 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.530939102 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530951023 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530958891 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.530967951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.530982018 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.531019926 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.531737089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.531755924 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.531769991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.531791925 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.580077887 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.686749935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.686808109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.686827898 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.686840057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.686851978 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.686863899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.686876059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.686888933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.686898947 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.686918974 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.686960936 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.687069893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.687083006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.687094927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.687108994 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.687115908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.687129021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.687133074 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.687140942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.687154055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.687165022 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.687165976 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.687177896 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.687190056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.687206984 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.687233925 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.688057899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688071012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688086987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688098907 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688107014 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.688111067 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688122988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688133955 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688143015 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.688178062 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.688498974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688580036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688591957 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688602924 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688615084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688626051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688630104 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.688637972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.688672066 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.689160109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.689172029 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.689182043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.689201117 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.689209938 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.689214945 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.689228058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.689239979 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.689240932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.689251900 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.689254045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.689266920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.689282894 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.689311028 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.844445944 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844464064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844485044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844496965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844508886 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844521046 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844533920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844605923 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.844613075 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844634056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844647884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844659090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844670057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844681025 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.844712973 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.844899893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844913006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844923973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844935894 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844948053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844949007 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.844959974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.844968081 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.845019102 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.845312119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845324039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845335960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845347881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845357895 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.845360994 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845375061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845386982 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.845387936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845401049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845427036 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.845451117 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.845707893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845720053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845731974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845767975 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.845851898 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845865965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845876932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845887899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845892906 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.845901012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845911980 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.845911980 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845932961 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845942974 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.845946074 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845958948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845969915 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845978022 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.845985889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.845995903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846003056 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.846031904 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.846725941 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846739054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846750975 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846761942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846771955 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.846772909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846785069 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846791983 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.846796989 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846808910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846821070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846824884 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.846832037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846844912 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846853971 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.846857071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846869946 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846882105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846893072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.846899986 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.846927881 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.846946001 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.847528934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.847541094 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.847552061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:31.847589016 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:31.892584085 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011423111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011447906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011461020 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011472940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011485100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011496067 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011501074 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011508942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011523962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011524916 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011535883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011545897 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011557102 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011568069 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011576891 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011579990 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011591911 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011595964 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011604071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011606932 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011617899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011630058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011631966 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011642933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011653900 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011657953 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011667013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011693954 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011706114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011717081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011718035 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011729956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011740923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011750937 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011776924 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011814117 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011825085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011835098 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011847019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011857033 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011867046 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011868954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011882067 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011884928 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011902094 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011909008 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011914968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011926889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011936903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011945963 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011950016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011960983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011965990 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.011974096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011986017 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.011993885 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.012006998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012015104 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.012052059 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.012738943 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012752056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012762070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012774944 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012787104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012793064 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.012799025 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012810946 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012814045 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.012821913 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012833118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012840986 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.012845039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012857914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012860060 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.012868881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012882948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012892962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.012897968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.012922049 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.012938023 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.016653061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016664028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016680956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016690969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016700029 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.016702890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016715050 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016725063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016733885 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.016736984 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016748905 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016748905 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.016762972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016767979 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.016774893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016787052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.016808033 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.016832113 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.159853935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.159882069 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.159899950 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.159912109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.159924030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.159935951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.159946918 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.159960032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.159971952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160068989 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160079956 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160079956 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160118103 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160128117 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160203934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160243988 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160263062 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160274982 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160309076 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160315990 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160326004 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160335064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160346985 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160356998 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160356998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160370111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160382032 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160433054 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160567999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160579920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160589933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160613060 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160653114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160670042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160681009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160701990 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160726070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160733938 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160744905 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160758972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160768986 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160784006 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160811901 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160832882 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160844088 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160855055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160865068 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160876036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160888910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160898924 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160936117 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.160965919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160978079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.160990000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161000967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161009073 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161036968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161067009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161078930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161091089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161101103 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161115885 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161151886 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161189079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161201000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161211967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161222935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161230087 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161264896 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161269903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161282063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161293030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161304951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161326885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161334991 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161339045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161355019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161362886 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161391973 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161894083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161906004 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161916018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161926985 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161938906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161941051 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161951065 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161963940 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161971092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161982059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.161984921 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.161993980 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162004948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162015915 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162028074 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162033081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162045002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162055016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162064075 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162066936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162081003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162086964 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162095070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162105083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162112951 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162117004 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162128925 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162139893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162141085 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162152052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162163973 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162167072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162179947 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162189960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162198067 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162209988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162221909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162225962 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162233114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162245989 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162265062 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162293911 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162389040 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162400961 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162410021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162420988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162431955 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162436008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162453890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162460089 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162466049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162477016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162491083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162501097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162501097 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162518024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162525892 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162530899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162530899 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162543058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162544966 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162555933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162566900 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162576914 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162579060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162589073 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.162607908 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.162626028 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.181237936 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.181407928 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.317720890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317735910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317747116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317756891 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317769051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317780018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317811966 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.317864895 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.317868948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317882061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317890882 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317902088 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317913055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317917109 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.317924976 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317935944 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317948103 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317951918 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.317970037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317975998 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.317987919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.317995071 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318000078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318010092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318022013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318028927 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318033934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318048954 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318072081 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318089008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318157911 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318170071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318180084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318197966 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318201065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318211079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318219900 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318223953 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318250895 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318270922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318315983 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318316936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318331003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318366051 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318377018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318388939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318418980 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318528891 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318541050 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318551064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318561077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318572044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318577051 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318583012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318594933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318604946 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318604946 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318619013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318628073 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318645954 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318669081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318681002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318691969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318703890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318713903 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318741083 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318782091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318794012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318803072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318814993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318825006 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318828106 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318835020 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318866968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.318895102 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.318964958 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319013119 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319044113 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319053888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319063902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319086075 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319114923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319127083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319137096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319148064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319161892 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319165945 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319181919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319190025 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319195986 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319197893 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319206953 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319217920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319233894 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319262028 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319293976 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319309950 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319334030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319350004 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319386005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319396973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319408894 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319420099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319432020 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319439888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319449902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319456100 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319468975 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319525957 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319539070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319555044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319566011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319569111 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319593906 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319603920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319650888 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319660902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319679022 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319689035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319700956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319711924 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319739103 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319835901 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319847107 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319864035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319874048 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319883108 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319885969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319897890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319909096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319910049 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319926023 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319937944 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319945097 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319951057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.319971085 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.319977999 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320175886 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320187092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320197105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320207119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320218086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320220947 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320230007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320241928 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320246935 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320254087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320265055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320274115 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320276022 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320300102 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320303917 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320317984 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320375919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320388079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320398092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320410013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320420980 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320446014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320446014 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320457935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320471048 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320482969 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320507050 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320538044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320549965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320559978 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320576906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320579052 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320590019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320600986 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320612907 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.320616961 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.320635080 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.361341000 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.475614071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475651026 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475661039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475672007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475684881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475719929 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.475754976 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.475769043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475780964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475799084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475810051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475810051 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.475821018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475832939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475836039 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.475845098 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475863934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475873947 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.475877047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475883007 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.475889921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475903988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475913048 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475913048 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.475924969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475936890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.475939989 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.475965023 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.475996017 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476007938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476018906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476030111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476035118 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476042032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476051092 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476084948 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476258039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476269960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476279974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476330996 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476361036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476373911 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476393938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476399899 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476437092 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476459026 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476497889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476530075 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476536036 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476717949 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476735115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476744890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476754904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476758003 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476768017 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476778030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476789951 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476794004 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476804972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476814032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476819038 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476825953 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476834059 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476839066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476850986 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476861000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476871967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476871967 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476885080 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476897001 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476913929 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476937056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476948977 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476958036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.476979017 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.476993084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477004051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477015018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477025986 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477031946 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477036953 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477058887 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477077007 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477108955 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477118969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477149963 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477252960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477298021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477308989 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477334023 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477440119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477451086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477461100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477471113 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477480888 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477488041 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477499008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477509022 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477516890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477529049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477535963 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477547884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477557898 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477565050 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477576971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477582932 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477586031 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477596998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477608919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477618933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477624893 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477638960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477642059 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477650881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477664948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477665901 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477677107 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477689981 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477693081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477711916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477715969 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477722883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477736950 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477747917 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477773905 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477809906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477821112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477830887 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477842093 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477853060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477854013 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477868080 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477875948 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477880001 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477894068 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477905035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477916956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477916956 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477929115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477940083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.477943897 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477963924 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477976084 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.477989912 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478002071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478012085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478023052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478032112 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478032112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478074074 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478099108 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478110075 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478121042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478132963 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478138924 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478147030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478157997 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478159904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478185892 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478292942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478303909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478315115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478324890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478336096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478344917 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478346109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478358030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478368998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478374004 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478382111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478391886 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478421926 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478425026 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478435040 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478446007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478472948 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478549004 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478559971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478570938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478583097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478590012 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478595018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478606939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478615046 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478617907 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478631020 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478641033 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478641987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478653908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478658915 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478682041 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478727102 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478738070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478749037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478771925 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478782892 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478801966 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478812933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478822947 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478835106 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478843927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478847027 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478872061 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478880882 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478909016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478918076 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.478920937 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.478951931 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.479028940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479041100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479049921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479062080 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479075909 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.479079962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479093075 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479103088 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.479104042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479121923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479121923 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.479140043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479151964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479156017 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.479163885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479175091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479186058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479187012 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.479197025 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479211092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479211092 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.479222059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479234934 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.479259014 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.479363918 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479376078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479386091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479397058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.479408979 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.479434013 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.515958071 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.516016960 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.633769035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.633793116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.633805037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.633816004 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.633842945 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.633881092 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.633893967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.633905888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.633918047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.633929968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.633939981 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.633941889 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.633965015 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.633992910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634008884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634020090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634031057 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634032965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634046078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634054899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634067059 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634071112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634088993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634095907 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634099960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634111881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634119034 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634129047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634140015 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634143114 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634151936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634164095 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634170055 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634175062 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634186983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634195089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634196043 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634207964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634217024 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634227037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634237051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634242058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634243011 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634258032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634268045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634277105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634278059 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634290934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634306908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634309053 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634320974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634330034 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634331942 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634344101 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634352922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634363890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634371996 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634401083 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634413958 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634737015 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634789944 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634800911 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634826899 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634843111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634855032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634871960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634882927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634884119 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634896040 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.634908915 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.634933949 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636429071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636584044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636595011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636605024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636621952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636629105 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636632919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636645079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636651993 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636657000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636667967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636674881 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636688948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636701107 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636703014 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636712074 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636723042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636734009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636737108 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636745930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636764050 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636771917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636780977 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636785030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636795998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636806965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636814117 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636817932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636830091 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636833906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636846066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636853933 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636863947 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636876106 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636883974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636888027 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636902094 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636908054 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636913061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636925936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636934042 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636935949 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636948109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.636966944 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.636982918 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637001038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637012959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637022018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637032986 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637042999 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637043953 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637057066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637068987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637080908 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637105942 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637115955 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637129068 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637139082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637151957 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637155056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637168884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637176991 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637217999 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637248039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637259007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637269020 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637290001 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637396097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637408018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637417078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637428999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637440920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637447119 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637451887 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637465000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637473106 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637475967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637486935 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637489080 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637506008 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637514114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637525082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637533903 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637533903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637547970 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637558937 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637561083 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637573004 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637579918 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637619972 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637633085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637649059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637660027 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637670994 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637681007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637685061 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637707949 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637744904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637757063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637767076 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637778997 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637789965 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637792110 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637814045 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637831926 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637887955 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637900114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637909889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637921095 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637932062 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637933969 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637943983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637954950 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.637955904 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.637981892 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638008118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638019085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638027906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638045073 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638052940 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638056993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638067961 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638075113 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638079882 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638091087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638098001 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638103008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638113976 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638128042 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638148069 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638191938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638202906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638211966 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638231039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638236046 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638243914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638253927 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638253927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638279915 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638279915 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638293028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638303041 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638313055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638319969 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638324976 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638345003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638346910 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638355970 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638367891 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638389111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638394117 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638401031 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638411999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638422966 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638433933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638436079 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638446093 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638461113 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638478994 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638520956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638533115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638541937 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638559103 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638571024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638576984 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638580084 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638616085 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638724089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638735056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638745070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638761044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638768911 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638772964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638784885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638797998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638807058 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638808966 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638820887 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638825893 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638833046 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638849974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638849974 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638863087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638875008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638875008 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638885021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638895988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638906956 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638906956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638922930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.638928890 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.638950109 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.689532042 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.791409016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791434050 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791445971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791487932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791498899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791511059 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.791635036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791645050 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.791651964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791663885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791673899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791686058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791699886 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.791701078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791719913 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791731119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791742086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791753054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791759014 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.791765928 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791775942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791786909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791798115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.791836977 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792175055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792193890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792208910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792220116 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792247057 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792270899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792285919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792296886 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792309999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792330980 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792352915 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792413950 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792423964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792434931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792457104 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792478085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792489052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792498112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792512894 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792524099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792526960 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792552948 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792562962 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792608023 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792618036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792649984 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792689085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792700052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792710066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792720079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792732000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792737007 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792743921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792754889 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792783022 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792784929 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792795897 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792835951 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.792912960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792923927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792933941 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.792958975 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793015003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793032885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793045998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793056965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793056965 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793082952 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793148994 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793160915 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793173075 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793185949 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793195009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793207884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793217897 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793225050 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793230057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793241024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793242931 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793270111 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793385983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793395996 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793406963 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793423891 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793435097 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793462038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793473005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793518066 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793627024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793637991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793648005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793658018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793673992 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793692112 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.793870926 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793881893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793893099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.793911934 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794096947 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794107914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794118881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794135094 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794137955 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794147968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794159889 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794183969 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794253111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794269085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794279099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794290066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794300079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794311047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794317007 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794317007 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794322968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794341087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794351101 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794357061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794368982 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794384956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794385910 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794397116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794404984 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794409037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794423103 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794434071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794444084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794451952 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794456005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794478893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794478893 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794496059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794507980 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794517994 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794519901 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794529915 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794543028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794543028 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794555902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794564962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794569969 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794578075 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794589996 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794595957 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794601917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794614077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794617891 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794641018 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794738054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794749975 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794759035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794770002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794775963 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794781923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794792891 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794799089 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794805050 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794816017 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794822931 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794826031 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794837952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794845104 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794855118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794867992 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794871092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794883013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794893980 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794894934 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794904947 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794917107 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794919014 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794928074 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794939995 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794945955 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794954062 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794965982 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794969082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794981003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.794991016 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.794998884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795015097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795015097 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795027971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795037031 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795047045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795053005 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795059919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795070887 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795090914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795094013 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795103073 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795114040 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795141935 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795201063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795212030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795222044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795237064 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795258045 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795325994 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795336962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795346975 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795357943 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795367956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795381069 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795386076 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795403957 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795428991 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795434952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795444965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795454979 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795474052 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795532942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795568943 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795588970 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795600891 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795617104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795629978 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795638084 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795641899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795654058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795660019 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795665979 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795696974 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795701027 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795737982 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795749903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795759916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795777082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795793056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795794010 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795830011 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.795888901 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795902014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.795934916 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796118975 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796129942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796140909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796149015 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796159029 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796165943 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796173096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796183109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796185017 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796194077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796204090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796207905 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796214104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796226025 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796236038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796238899 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796247959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796257973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796266079 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796268940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796298027 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796428919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796447039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796458006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796468019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796468973 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796479940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796489954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796493053 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796500921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796511889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796514988 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796523094 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796535015 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796546936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796550035 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796557903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796576023 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796576977 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796586990 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796607971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796617031 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796617985 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796633005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796643972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796652079 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796655893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796668053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796673059 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796679974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796689987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796691895 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796710968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796713114 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796721935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796734095 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796746016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796756983 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796777964 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796814919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796825886 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796834946 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796844959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796854019 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796857119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796875000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796878099 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796886921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.796897888 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.796921968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797087908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797100067 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797110081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797122955 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797130108 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797135115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797147036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797162056 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797182083 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797230005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797241926 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797252893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797264099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797274113 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797283888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797286987 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797301054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797310114 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797313929 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797326088 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797327042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797338963 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797348976 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797352076 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797363997 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797373056 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797408104 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797590971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797601938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797612906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797630072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797636032 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797646999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797660112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797665119 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797672033 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797683001 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797688961 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797693968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797708035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797712088 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797720909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797733068 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797743082 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797749043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797759056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797770023 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797776937 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797780991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797794104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797801018 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797806978 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797816992 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797821999 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797849894 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797888994 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797903061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797914028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.797925949 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.797949076 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.798358917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798372030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798382998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798393965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798407078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798415899 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.798418999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798432112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798441887 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.798465967 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.798475027 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798486948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798496962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798507929 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798516989 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.798520088 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798525095 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.798532009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798543930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798557997 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.798592091 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.798609972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798621893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798631907 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798643112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798654079 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.798656940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798669100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798681021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798681021 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.798692942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798705101 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.798707008 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.798731089 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.806243896 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.806322098 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.949368954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949388027 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949393988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949399948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949495077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949505091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949516058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949527025 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949542999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949554920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949565887 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949577093 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949634075 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949645996 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949656963 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949666977 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.949670076 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949729919 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.949736118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949748039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949757099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949762106 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949771881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949789047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949791908 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.949800968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949811935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949820042 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.949841022 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.949856997 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.949873924 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949886084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949894905 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949906111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949918032 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.949949980 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.949971914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949982882 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.949992895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950002909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950014114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950021982 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950043917 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950083971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950094938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950113058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950124025 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950129032 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950153112 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950169086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950181007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950196028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950206995 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950213909 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950217962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950232029 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950264931 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950444937 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950455904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950465918 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950475931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950491905 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950491905 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950503111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950514078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950515985 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950529099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950536966 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950540066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950551987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950562000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950575113 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950577974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950603008 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950615883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950624943 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950628042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950639009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950650930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950658083 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950661898 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950681925 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950748920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950761080 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950774908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950786114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950797081 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950824976 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950829983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950840950 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950858116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950870991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950871944 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950896025 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950917959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950928926 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950938940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.950962067 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.950985909 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951052904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951064110 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951073885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951082945 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951098919 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951118946 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951208115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951220989 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951231003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951241016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951251984 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951253891 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951277018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951280117 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951298952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951318026 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951396942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951440096 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951483011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951493979 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951503992 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951514959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951525927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951528072 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951551914 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951648951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951659918 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951669931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951679945 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951689959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951693058 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951708078 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951736927 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951755047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951767921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951777935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951788902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951802015 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951816082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951821089 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.951942921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.951987982 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.952162027 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952210903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952223063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952255011 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.952353954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952364922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952374935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952387094 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952402115 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.952414989 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.952584982 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952601910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952611923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952626944 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.952651978 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.952749014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952759027 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952769041 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952780008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952796936 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.952811956 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.952898979 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952909946 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952925920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952938080 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952939987 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.952949047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952960968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952970982 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952979088 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.952982903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952996016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.952996016 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953023911 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953056097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953067064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953082085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953093052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953100920 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953104973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953115940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953114986 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953133106 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953144073 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953172922 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953205109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953216076 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953224897 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953237057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953248978 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953249931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953260899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953272104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953283072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953284979 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953294039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953305960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953313112 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953316927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953329086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953339100 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953346968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953363895 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953363895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953377962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953389883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953399897 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953406096 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953411102 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953423023 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953429937 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953433037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953444958 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953454018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953457117 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953464985 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953471899 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953475952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953496933 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953504086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953516960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953520060 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953527927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953540087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953548908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953552008 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953560114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953571081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953572035 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953582048 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953592062 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953594923 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953603983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953609943 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953613043 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953628063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953638077 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953639030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953650951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953666925 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953674078 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953679085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953689098 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953691959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953705072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953713894 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953715086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953726053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953742981 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953746080 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953763962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953769922 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953775883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953787088 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953795910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953799009 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953809023 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953821898 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953824997 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953834057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953845024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953854084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953861952 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953866005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953877926 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953887939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953890085 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953900099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953912973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953913927 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953932047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953943968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953943968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953955889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953968048 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953968048 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.953979015 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953989983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.953994989 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954001904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954013109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954019070 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954022884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954035044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954042912 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954046011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954058886 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954066992 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954071045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954082966 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954090118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954101086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954107046 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954113960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954123974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954132080 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954134941 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954147100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954159021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954169035 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954169035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954180956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954190016 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954191923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954202890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954214096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954214096 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954232931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954240084 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954245090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954252958 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954256058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954269886 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954278946 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954282045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954294920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954301119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954303980 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954307079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954317093 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954329014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954329014 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954340935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954343081 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954355955 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954361916 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954376936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954389095 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954395056 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954400063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954411983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954421997 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954422951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954436064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954446077 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954446077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954458952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954468966 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954471111 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954484940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954494953 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954497099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954508066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954519033 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954519987 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954530001 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954540968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954544067 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954551935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954562902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954571962 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954575062 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954586029 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954595089 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954596043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954608917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954607964 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954619884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954633951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954633951 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954651117 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954658031 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954660892 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954673052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954684019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954688072 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954695940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954706907 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954713106 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954716921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954727888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954735994 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954745054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954750061 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954765081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954777002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954777002 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954790115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954801083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954811096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954818010 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954822063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954829931 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954833984 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954844952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954857111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954859018 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954871893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954878092 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954884052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954895973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954905987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954909086 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954926014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954927921 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954938889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954950094 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954961061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954971075 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954972029 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954977989 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.954984903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.954996109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955008030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955008030 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955020905 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955032110 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955041885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955046892 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955051899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955058098 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955071926 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955084085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955096006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955099106 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955106974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955117941 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955128908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955132008 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955142021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955148935 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955152988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955164909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955168962 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955176115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955187082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955197096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955199003 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955209017 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955209970 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955224991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955231905 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955238104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955248117 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955259085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955265045 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955271006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:32.955286980 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955332041 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955338955 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:32.955420017 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.106915951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.106931925 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.106947899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.106951952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.106961012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.106971979 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.106981993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.106997967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.107009888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.107019901 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.107106924 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.107119083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.107130051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.107131004 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.107171059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.107182980 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.107193947 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.107204914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.107217073 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.107317924 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108016968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108027935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108040094 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108050108 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108062029 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108072996 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108076096 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108092070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108103991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108113050 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108114958 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108141899 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108177900 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108190060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108217955 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108330011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108341932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108350992 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108362913 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108374119 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108386993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108405113 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108407974 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108417034 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108427048 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108431101 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108443975 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108453035 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108454943 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108465910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108479977 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108483076 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108496904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108500957 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108503103 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108509064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108514071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108529091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108541012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108551025 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108555079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108566999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108568907 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108578920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108588934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108593941 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108602047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108613014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108622074 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108643055 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108683109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108699083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108710051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108721018 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108731985 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108745098 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108746052 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108755112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108767033 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108773947 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108778000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108789921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108797073 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108805895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108815908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108825922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108836889 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108839989 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108845949 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108851910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108864069 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108875036 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108887911 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108900070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108910084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108911037 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108922958 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108931065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108935118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108948946 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108961105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108971119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108973026 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.108983994 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108995914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.108999014 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109016895 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109025002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109030008 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109036922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109052896 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109070063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109078884 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109082937 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109093904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109105110 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109106064 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109117985 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109128952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109129906 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109142065 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109153032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109162092 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109163046 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109175920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109189034 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109200001 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109211922 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109219074 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109230995 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109237909 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109241009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109253883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109262943 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109265089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109277964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109287977 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109291077 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109301090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109312057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109322071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109325886 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109333038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109344006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109353065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109370947 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109376907 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109385967 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109390974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109401941 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109412909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109422922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109425068 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109436035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109446049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109453917 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109456062 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109469891 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109481096 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109482050 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109493971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109494925 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109505892 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109520912 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109524012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109535933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109546900 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109548092 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109559059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109570026 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109591007 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109591007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109606028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109616041 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109616041 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109627962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109635115 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109642029 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109652996 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109658957 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109671116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109683990 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109688997 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109702110 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109708071 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109714031 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109724998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109734058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109736919 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109745979 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109749079 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109757900 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109770060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109780073 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109791994 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109797955 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109802961 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109821081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109822035 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109837055 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109839916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109853983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109857082 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109869957 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109880924 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109886885 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109893084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109910011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109918118 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109921932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109934092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109945059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109946012 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109951019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109961987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109967947 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109972954 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109978914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.109981060 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.109992027 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110006094 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110017061 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110017061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110028028 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110038996 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110050917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110058069 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110060930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110075951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110083103 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110093117 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110105038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110114098 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110116959 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110126019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110137939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110140085 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110150099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110157013 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110162973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110173941 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110186100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110196114 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110203028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110219002 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110220909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110234022 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110235929 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110245943 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110256910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110268116 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110275984 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110286951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110292912 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110299110 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110311031 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110322952 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110322952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110336065 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110344887 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110347986 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110368013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110373974 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110379934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110390902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110402107 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110404968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110404968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110416889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110428095 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110438108 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110440969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110456944 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110479116 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110541105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110553980 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110558033 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110565901 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110574961 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110584021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110595942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110596895 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110606909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110618114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110620975 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110630989 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110637903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110640049 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110671043 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110687017 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110739946 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110763073 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110775948 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110795975 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110806942 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110806942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110829115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110845089 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110856056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110867977 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110877037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110878944 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110889912 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.110894918 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110903978 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110949993 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.110970974 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111037016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111047983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111057043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111068964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111078024 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111079931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111092091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111099958 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111103058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111112118 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111119032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111131907 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111141920 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111143112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111155987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111166954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111166954 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111183882 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111191988 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111202002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111212969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111223936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111223936 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111237049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111248016 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111248970 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111262083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111272097 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111272097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111287117 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111298084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111308098 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111325026 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111335039 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111335993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111354113 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111356020 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111363888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111378908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111392021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111401081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111411095 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111418962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111419916 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111432076 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111443043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111454010 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111460924 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111464024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111476898 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111479044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111490965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111500978 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111501932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111521006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111532927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111537933 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111543894 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111556053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111565113 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111568928 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111581087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111586094 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111593962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111605883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111609936 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111620903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111629963 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111630917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111644030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111655951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111668110 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111669064 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111685991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111686945 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111697912 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111709118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111711025 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111721992 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111733913 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111735106 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111749887 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111757040 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111762047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111773968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111784935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111792088 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111794949 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111800909 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111807108 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111819029 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111829996 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111830950 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111844063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111855030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111860991 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111869097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111881018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111882925 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111892939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111907005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111917019 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111923933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111941099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111941099 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111953020 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111962080 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.111964941 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111979008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111989975 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.111990929 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112004042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112014055 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112020969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112032890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112036943 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112056017 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112070084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112071037 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112081051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112092018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112096071 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112102032 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112102985 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112116098 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112124920 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112128019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112140894 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112148046 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112152100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112164974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112181902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112183094 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112195015 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112205982 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112205982 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112226009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112234116 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112238884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112251997 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112262964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112266064 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112274885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112282038 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112287998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112299919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112309933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112312078 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112323046 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112328053 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112334967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112346888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112358093 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112359047 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112380028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112387896 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112397909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112410069 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112415075 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112421036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112422943 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112432957 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112445116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112445116 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112457037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112467051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112471104 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112478018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112489939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112499952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112502098 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112509012 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112513065 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112524033 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112529993 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112534046 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112552881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112555027 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112571955 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112582922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112591028 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112595081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112607956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112616062 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112620115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112631083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112638950 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112642050 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112658978 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112668991 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112675905 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112684965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112694979 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112694979 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112709045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112718105 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112719059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112731934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112740993 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112745047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112755060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112766981 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112767935 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112778902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112791061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112792015 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112808943 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112817049 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112824917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112837076 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112847090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112850904 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112859964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112870932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112875938 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112883091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112894058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112900972 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112905025 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112910986 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112916946 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112927914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112936974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112948895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112950087 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112967014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112973928 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112979889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.112987041 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.112993002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113003969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113013029 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113014936 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113028049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113038063 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113045931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113058090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113070011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113070011 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113080978 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113092899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113095999 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113104105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113116026 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113122940 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113126993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113140106 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113142014 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113152027 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113163948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113168955 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113174915 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113188028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113190889 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113199949 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113212109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113224030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113229036 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113234997 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113246918 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113264084 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113267899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113280058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113289118 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113291025 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113301992 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113312006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.113312960 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113333941 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113405943 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.113472939 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265094995 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265111923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265122890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265132904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265147924 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265161991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265172958 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265183926 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265196085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265213013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265229940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265239954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265250921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265260935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265273094 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265283108 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265291929 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265300989 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265311956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265326023 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265332937 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265337944 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265342951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265348911 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265355110 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265366077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265367031 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265379906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265397072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265408993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265428066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265439987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265450001 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265460968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265471935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265485048 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265495062 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265506983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265516996 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265527964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265537024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265556097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265568018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265578032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265590906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265602112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265613079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265624046 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265624046 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265636921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265646935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265654087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265664101 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265675068 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265687943 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265698910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265712976 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265721083 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265731096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265743971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265743971 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265757084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265779018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265782118 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265795946 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265813112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265815973 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265832901 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265846014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265846014 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265856981 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265876055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265877008 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265887022 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265901089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265909910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265918970 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265927076 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265938997 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265944958 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265949011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265965939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265978098 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.265989065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.265989065 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266002893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266012907 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266017914 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266024113 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266035080 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266037941 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266048908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266058922 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266066074 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266078949 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266082048 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266096115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266105890 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266108990 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266119957 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266132116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266135931 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266143084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266155005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266164064 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266166925 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266180038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266182899 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266191959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266205072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266215086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266218901 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266227007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266237974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266248941 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266251087 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266267061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266283035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266283035 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266295910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266305923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266308069 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266318083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266324043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266334057 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266340971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266350985 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266360998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266361952 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266372919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266381979 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266385078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266397953 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266406059 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266408920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266422033 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266432047 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266433954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266448021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266455889 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266472101 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266494036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266505003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266515970 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266526937 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266531944 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266545057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266551971 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266557932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266568899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266580105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266591072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266597033 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266602993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266616106 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266625881 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266633034 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266644955 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266654968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266663074 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266666889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266679049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266684055 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266690969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266704082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266715050 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266715050 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266724110 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266726971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266738892 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266746998 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266751051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266771078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266778946 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266782999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266793966 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266804934 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266804934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266824961 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266830921 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266836882 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266849041 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266859055 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266860008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266874075 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266881943 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266886950 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266906977 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266910076 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266917944 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266931057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266942024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266942978 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266956091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.266968012 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.266992092 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267030954 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267087936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267106056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267116070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267132998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267139912 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267146111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267158985 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267167091 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267179012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267190933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267195940 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267209053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267220020 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267225981 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267231941 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267242908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267254114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267254114 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267273903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267282963 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267285109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267297983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267307043 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267311096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267329931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267330885 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267342091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267359972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267374992 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267378092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267390013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267400980 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267401934 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267412901 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267425060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267441988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267452955 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267455101 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267471075 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267474890 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267482996 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267494917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267505884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267513037 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267518044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267524958 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267537117 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267549038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267559052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267570019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267574072 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267584085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267594099 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267595053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267604113 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267608881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267620087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267631054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267640114 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267642021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267654896 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267667055 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267667055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267677069 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267683029 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267698050 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267707109 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267709017 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267720938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267731905 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267734051 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267745972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267754078 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267759085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267771006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267781019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267787933 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267796040 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267806053 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267815113 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267827034 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267832041 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267839909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267852068 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267864943 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267872095 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267875910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267889023 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.267896891 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.267914057 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268260956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268300056 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268311024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268398046 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268409014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268420935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268431902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268438101 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268446922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268459082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268459082 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268486023 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268656969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268668890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268680096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268691063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268697023 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268723011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268724918 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268735886 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268748045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268759012 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268759966 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268773079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268786907 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268812895 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268857002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268867016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268886089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268898010 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268898964 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268908978 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268922091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268932104 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268939972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268951893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268959999 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268965006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268978119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.268985033 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.268989086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269001007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269010067 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269010067 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269021988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269035101 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269036055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269056082 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269066095 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269077063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269088030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269099951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269100904 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269110918 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269128084 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269131899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269145012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269145966 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269190073 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269330978 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269344091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269354105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269366980 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269377947 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269387007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269401073 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269406080 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269413948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269424915 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269437075 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269443035 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269453049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269464970 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269465923 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269490004 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269507885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269520044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269530058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269543886 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269551039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269562006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269562960 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269573927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269586086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269598007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269608021 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269618988 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269639969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269671917 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269746065 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269763947 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269776106 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269788027 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269795895 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269799948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269819021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269823074 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269831896 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269841909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269848108 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269857883 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269876957 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269907951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269925117 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269937038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269946098 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269948006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269961119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269968987 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.269973040 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.269984007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270004034 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270031929 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270272970 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270284891 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270301104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270330906 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270400047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270411968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270422935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270436049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270437956 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270448923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270459890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270462990 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270478964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270488977 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270493031 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270505905 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270514965 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270517111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270530939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270539045 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270541906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270555019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270565987 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270567894 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270580053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270591974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270592928 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270612001 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270627975 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270639896 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270651102 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270663023 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270665884 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270673990 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270685911 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270689011 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270699024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270704031 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270711899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270721912 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270734072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270735025 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270755053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270765066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270773888 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270776033 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270788908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270797968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270802975 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270808935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270811081 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270821095 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270834923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270839930 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270847082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270859003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270864964 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270870924 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270883083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270884991 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270895004 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270906925 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270919085 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270945072 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.270966053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270982027 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.270993948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271006107 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271007061 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271018982 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271030903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271034956 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271043062 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271060944 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271064043 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271079063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271080971 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271090984 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271104097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271112919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271115065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271125078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271138906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271141052 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271150112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271162987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271164894 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271183968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271219969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271231890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271241903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271253109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271258116 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271265030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271274090 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271276951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271289110 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271298885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271302938 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271311045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271328926 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271334887 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271342039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271362066 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271363974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271384954 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271389008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271400928 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271411896 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271423101 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271423101 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271436930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271450043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271451950 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271462917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271472931 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271476030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271495104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271497965 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271506071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271519899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271532059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271534920 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271543980 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271555901 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271559954 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271569014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271580935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271584034 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271600008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271600008 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271614075 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271625042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271641970 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271642923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271661997 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271663904 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271673918 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271686077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271697044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271701097 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271708965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271720886 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271724939 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271733999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271747112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271755934 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271759987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271765947 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271775007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271786928 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271797895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271806955 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271810055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271821976 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271828890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271842957 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271853924 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271855116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271868944 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271883011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271888018 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271900892 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271907091 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271914005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271933079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271945000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271955013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271962881 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.271966934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271986008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.271990061 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272005081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272017956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272027969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272028923 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272041082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272053003 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272056103 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272069931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272078991 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272079945 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272094011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272104025 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272105932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272125006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272130013 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272135973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272152901 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272161007 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272165060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272176981 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272188902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272188902 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272201061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272213936 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272218943 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272233009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272241116 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272243977 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272255898 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272264004 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272267103 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272279024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272289038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272290945 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272301912 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272313118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272315025 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272325039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272334099 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272345066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272356987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272361040 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272368908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272381067 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272389889 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272392988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272404909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272416115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272417068 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272428989 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272439957 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272442102 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272452116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272470951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272474051 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272490025 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272492886 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272501945 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272514105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272525072 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272526979 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272540092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272548914 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272552967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272564888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272577047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272577047 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272592068 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272603989 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272607088 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272614956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272627115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272630930 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272644043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272655964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272660017 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272666931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272679090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272686005 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272691011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272703886 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272710085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272711992 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272721052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272732973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272743940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272752047 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272756100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272768021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272777081 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272780895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272790909 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272803068 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272814035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272819996 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272828102 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272841930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272855043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272864103 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272867918 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272881985 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272891998 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272891998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272903919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272911072 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272916079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272933960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272939920 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272945881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272958994 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272958994 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272973061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272978067 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.272985935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.272998095 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273008108 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273016930 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.273017883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273031950 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273035049 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.273042917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273055077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273058891 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.273066044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273078918 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273091078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273096085 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.273102999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273116112 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273117065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.273127079 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.273129940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273143053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273155928 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.273181915 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.273319960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273338079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273349047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273360968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.273382902 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.273407936 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.290910959 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.291007042 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.307975054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.307990074 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.308000088 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.308111906 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.422880888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.422910929 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.422924042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.422980070 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423060894 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423073053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423084021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423095942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423106909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423118114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423119068 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423129082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423139095 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423141003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423154116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423154116 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423166037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423177958 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423197031 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423223972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423234940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423244953 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423257113 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423266888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423268080 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423279047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423290968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423290968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423300982 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423302889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423321962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423331976 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423332930 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423345089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423358917 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423361063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423373938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423384905 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423389912 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423397064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423408031 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423418045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423418999 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423429966 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423435926 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423441887 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423445940 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423453093 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423477888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423480034 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423495054 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423496008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423511028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423521042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423532009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423533916 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423543930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423556089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423561096 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423568964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423579931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423583984 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423592091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423602104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423608065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423636913 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423765898 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423823118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423825026 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.423837900 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423856020 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423867941 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423877001 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423890114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423899889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.423934937 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.424272060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424284935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424294949 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424304962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424314976 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.424315929 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424329042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424340010 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424340963 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.424350977 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424365044 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.424372911 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.424552917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424565077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424575090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424587011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424593925 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.424598932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424609900 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424614906 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.424623013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424633026 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.424638033 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.424662113 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425246000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425256014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425267935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425292015 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425307989 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425373077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425384998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425395012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425405025 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425415993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425427914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425437927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425445080 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425448895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425460100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425472021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425482035 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425482988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425508976 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425527096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425538063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425548077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425559998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425570965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425573111 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425581932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425594091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425599098 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425606012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425617933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425632954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425641060 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425642967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425654888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425664902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425664902 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425676107 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425693035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425703049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425704002 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425714016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425724030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425724983 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425730944 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425736904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425746918 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425753117 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425759077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425769091 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425774097 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425781012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425801992 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425805092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425817966 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425823927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425839901 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425851107 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425859928 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425865889 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425872087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425880909 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425884008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425896883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425906897 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425910950 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425920963 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425930977 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425940037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425945044 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425951958 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425964117 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425972939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425975084 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.425990105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.425992966 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426007032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426009893 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426018000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426023006 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426029921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426045895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426055908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426065922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426068068 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426076889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426088095 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426090956 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426100016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426109076 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426117897 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426121950 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426135063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426147938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426160097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426160097 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426172972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426186085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426194906 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426197052 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426208019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426218987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426224947 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426229954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426242113 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426251888 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426254988 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426264048 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426265001 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426282883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426287889 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426299095 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426301003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426314116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426323891 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426336050 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426345110 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426346064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426359892 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426371098 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426373959 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426382065 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426387072 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426393986 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426398993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426404953 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426409006 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426413059 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426414013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426419020 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426424026 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426434994 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426446915 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426465988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426482916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426491022 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426491022 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426491976 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426506042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426517010 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426517963 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426529884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426539898 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426542044 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426551104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426562071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426563978 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426573992 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426584959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426594973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426599979 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426605940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426615953 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426626921 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426630974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426646948 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426647902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426660061 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426666975 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426671028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426681995 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426686049 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426693916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426703930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426708937 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426716089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426726103 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426729918 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426738977 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426748991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426759005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426765919 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426769018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426793098 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426795959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426812887 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426815033 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426824093 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426829100 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426835060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426846981 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426856995 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426862955 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426868916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426878929 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426884890 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426891088 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426902056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426911116 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426913977 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426925898 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426932096 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426935911 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426949024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426961899 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426964998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426975965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426985979 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.426987886 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.426996946 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427007914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427009106 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427018881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427018881 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427031040 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427042007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427048922 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427053928 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427064896 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427074909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427076101 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427088976 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427092075 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427105904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427114964 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427118063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427129984 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427140951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427145004 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427154064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427164078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427165985 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427176952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427187920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427191019 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427198887 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427211046 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427221060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427226067 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427233934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427252054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427254915 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427268028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427279949 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427282095 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427292109 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427297115 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427304983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427323103 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427334070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427337885 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427344084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427346945 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427357912 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427359104 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427377939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427390099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427398920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427400112 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427412033 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427428961 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427438021 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427440882 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427452087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427463055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427467108 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427474022 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427484989 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427486897 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427495956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427500010 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427508116 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427519083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427519083 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427532911 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427545071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427555084 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427558899 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427568913 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427584887 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427586079 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427598000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427598953 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427608967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427623987 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427625895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427638054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427645922 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427649021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427660942 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427670956 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427671909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427685022 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427695036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427704096 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427707911 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427725077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427731991 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427736044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427743912 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427747965 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427767038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427771091 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427778959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427791119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427803040 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427813053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427814007 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427824974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427835941 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427836895 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427846909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427858114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427858114 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427869081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427880049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427881956 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427891016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427903891 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427911043 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427921057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427926064 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427932978 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427943945 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427944899 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427956104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427967072 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427973032 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.427978992 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.427989960 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428000927 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428002119 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428014040 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428020954 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428025007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428035975 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428040981 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428047895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428062916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428062916 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428083897 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428087950 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428097010 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428109884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428121090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428128004 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428131104 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428145885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428153992 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428158045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428168058 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428170919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428183079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428194046 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428204060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428208113 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428215027 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428225994 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428236008 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428237915 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428246975 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428251028 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428261995 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428262949 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428273916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428284883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428292990 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428301096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428312063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428322077 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428324938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428334951 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428337097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428349018 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428359032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428369045 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428371906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428384066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428390026 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428394079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428406954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428411007 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428417921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428427935 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428436041 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428446054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428463936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428464890 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428472996 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428484917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428494930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428495884 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428508043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428519011 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428519011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428531885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428541899 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428544998 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428554058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428554058 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428567886 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428580046 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428581953 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428599119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428605080 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428617954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428631067 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428638935 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428642035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428657055 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428668022 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428668022 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428682089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428692102 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428694010 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428704023 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428714991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428724051 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428725958 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428741932 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428742886 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428755045 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428764105 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428770065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428776979 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428792953 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428792953 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428807974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428809881 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428819895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428831100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428839922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428844929 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428852081 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428863049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428864002 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428875923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428886890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428898096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428900957 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428909063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428921938 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428925991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428936958 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428946018 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428952932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428962946 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428963900 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428976059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428986073 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.428987980 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.428999901 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429009914 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429016113 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429022074 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429034948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429045916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429048061 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429056883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429066896 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429071903 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429080009 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429091930 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429096937 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429106951 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429109097 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429121971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429132938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429136038 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429143906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429156065 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429160118 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429167986 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429177999 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429189920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429198027 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429202080 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429214001 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429224014 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429225922 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429239035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429248095 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429250956 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429254055 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429263115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429272890 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429274082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429286957 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429297924 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429305077 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429308891 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429321051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429328918 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429331064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429342985 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429346085 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429354906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429364920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429367065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429375887 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429393053 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429394007 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429405928 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429414988 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429418087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429429054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429439068 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429445982 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429450035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429461002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429466963 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429471016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429481030 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429483891 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429495096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429507017 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429507971 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429527044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429533005 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429539919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429549932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429560900 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429564953 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429574013 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429584026 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429586887 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429599047 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429615974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429625034 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429626942 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429636955 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429649115 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429660082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429670095 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429673910 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429682016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429692030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429697037 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429703951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429716110 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429723024 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429727077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429733992 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429738998 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429749966 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429750919 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429760933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429776907 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429783106 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429789066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429799080 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429800987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429812908 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429822922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429821968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429836035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429847002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429856062 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429857016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429868937 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429876089 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429879904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429892063 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429903030 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429908037 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429923058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429934025 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429935932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429948092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429955959 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429960012 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429970980 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429977894 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.429980993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.429995060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430002928 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430006981 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430021048 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430023909 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430032969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430043936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430047035 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430054903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430072069 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430072069 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430089951 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430092096 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430105925 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430119038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430129051 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430134058 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430140972 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430150986 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430156946 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430162907 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430175066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430183887 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430186987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430191994 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430200100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430210114 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430226088 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430233955 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430244923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430249929 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430257082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430268049 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430279016 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430289984 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430294991 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430300951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430313110 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430324078 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430325985 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430337906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430346012 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430350065 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430361032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430372000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430377960 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430382967 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430401087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430407047 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430413961 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430425882 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430429935 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430438995 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430449963 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430460930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430464029 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430471897 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430485010 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430495024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430501938 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430501938 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430512905 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430525064 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430525064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430537939 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430553913 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430553913 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430572033 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430573940 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430583954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430596113 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430607080 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430619001 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430620909 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430629969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430640936 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430651903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430651903 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430659056 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430664062 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430675983 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430677891 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430686951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430697918 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430701971 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430712938 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430725098 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430728912 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430735111 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430747032 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430757046 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430764914 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430772066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430783987 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430790901 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430794954 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430804968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430809021 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430819035 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430819035 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430831909 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430844069 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430845976 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430855036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430869102 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430872917 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430885077 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430892944 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430896044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430911064 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430922031 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430922031 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430933952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430944920 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430957079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430962086 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430969000 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430980921 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.430985928 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.430993080 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431005001 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431006908 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431015968 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431016922 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431037903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431047916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431052923 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431060076 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431071043 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431082964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431086063 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431097984 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431102991 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431107044 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431109905 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431117058 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431126118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431135893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431147099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431158066 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431159019 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431170940 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431178093 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431185961 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431189060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431200981 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431211948 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431222916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431226969 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431233883 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431242943 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431245089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431257963 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431268930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431277037 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431281090 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431293011 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431296110 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431303024 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431320906 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431330919 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431334019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431349039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431355953 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431363106 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431370020 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431384087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431401968 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431406975 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431413889 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431427002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431437969 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431446075 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431449890 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431463003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431469917 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431473970 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431487083 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431497097 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431499004 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431504965 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431510925 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431523085 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431533098 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431534052 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431545019 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431555033 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431557894 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431571007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431581974 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431587934 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431593895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431606054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431613922 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431617975 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431629896 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431633949 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431642056 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431653976 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431663036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431668997 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431674957 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431687117 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431694031 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431699038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431711912 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431720018 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431723118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431734085 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431735039 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431747913 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431750059 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431762934 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431771040 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431773901 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431786060 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431796074 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431797981 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431809902 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431821108 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431823969 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431838036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431850910 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431863070 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431869030 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431874037 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431883097 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431885958 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431896925 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431902885 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431910038 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431921005 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431930065 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431931973 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431945086 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431952953 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431960106 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431971073 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431981087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.431981087 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.431993008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.432005882 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.432009935 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.432018042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.432022095 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.432030916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.432049036 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.432071924 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.463023901 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.463063002 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.466015100 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.466044903 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.466064930 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.466080904 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.466084957 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.466095924 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.466120005 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.517599106 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.580887079 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.580940962 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581054926 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581126928 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581140041 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581157923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581171036 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581188917 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581198931 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581212044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581222057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581223011 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581234932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581248045 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581254959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581270933 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581283092 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581295967 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581331015 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581362963 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581374884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581386089 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581398964 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581408024 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581410885 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581433058 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581469059 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581504107 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581516981 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581526995 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581538916 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581548929 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581562042 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581566095 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581573963 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581585884 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581595898 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581597090 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581608057 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581618071 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581619024 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581634045 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581640959 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581653118 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581662893 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581667900 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581674099 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581681013 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581688881 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581700087 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581707954 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581711054 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581722975 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581732988 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581743002 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581743956 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581754923 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581758022 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581767082 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581779003 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581779003 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581790924 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581794977 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581809044 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581828117 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581831932 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581846952 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581856966 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581864119 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581876993 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581887007 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581887960 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581898928 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581909895 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581912041 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.581923008 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.581945896 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.582001925 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.582287073 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:33.582348108 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.582372904 CET	49704	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:33.587147951 CET	80	49704	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:34.011387110 CET	49705	15403	192.168.2.5	154.30.210.37
Nov 3, 2024 09:41:34.016235113 CET	15403	49705	154.30.210.37	192.168.2.5
Nov 3, 2024 09:41:34.016347885 CET	49705	15403	192.168.2.5	154.30.210.37
Nov 3, 2024 09:41:34.016495943 CET	49705	15403	192.168.2.5	154.30.210.37
Nov 3, 2024 09:41:34.021584034 CET	15403	49705	154.30.210.37	192.168.2.5
Nov 3, 2024 09:41:35.036828995 CET	15403	49705	154.30.210.37	192.168.2.5
Nov 3, 2024 09:41:35.082297087 CET	49705	15403	192.168.2.5	154.30.210.37
Nov 3, 2024 09:41:35.097178936 CET	49705	15403	192.168.2.5	154.30.210.37
Nov 3, 2024 09:41:35.101991892 CET	15403	49705	154.30.210.37	192.168.2.5
Nov 3, 2024 09:41:35.383990049 CET	15403	49705	154.30.210.37	192.168.2.5
Nov 3, 2024 09:41:35.397439003 CET	49705	15403	192.168.2.5	154.30.210.37
Nov 3, 2024 09:41:35.402276039 CET	15403	49705	154.30.210.37	192.168.2.5
Nov 3, 2024 09:41:35.705563068 CET	15403	49705	154.30.210.37	192.168.2.5
Nov 3, 2024 09:41:35.705583096 CET	15403	49705	154.30.210.37	192.168.2.5
Nov 3, 2024 09:41:35.705740929 CET	49705	15403	192.168.2.5	154.30.210.37
Nov 3, 2024 09:41:35.705848932 CET	49705	15403	192.168.2.5	154.30.210.37
Nov 3, 2024 09:41:35.706487894 CET	49706	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:35.710637093 CET	15403	49705	154.30.210.37	192.168.2.5
Nov 3, 2024 09:41:35.711301088 CET	80	49706	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:35.711385012 CET	49706	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:35.711494923 CET	49706	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:35.716408968 CET	80	49706	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:36.488404989 CET	80	49706	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:36.488512993 CET	49706	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:36.488631964 CET	49706	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:36.489368916 CET	49707	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:36.493412018 CET	80	49706	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:36.494065046 CET	80	49707	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:36.494133949 CET	49707	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:36.494187117 CET	49707	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:36.499020100 CET	80	49707	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:37.551063061 CET	80	49707	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:37.551141024 CET	49707	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:37.551199913 CET	49707	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:37.551837921 CET	49708	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:37.556057930 CET	80	49707	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:37.556721926 CET	80	49708	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:37.556799889 CET	49708	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:37.556854010 CET	49708	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:37.561614990 CET	80	49708	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:38.628616095 CET	80	49708	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:38.628679991 CET	49708	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:38.628717899 CET	49708	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:38.630426884 CET	49705	15403	192.168.2.5	154.30.210.37
Nov 3, 2024 09:41:38.630465984 CET	49705	15403	192.168.2.5	154.30.210.37
Nov 3, 2024 09:41:38.631014109 CET	49709	9001	192.168.2.5	87.162.115.145
Nov 3, 2024 09:41:38.633605957 CET	80	49708	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:38.635514975 CET	15403	49705	154.30.210.37	192.168.2.5
Nov 3, 2024 09:41:38.635807037 CET	15403	49705	154.30.210.37	192.168.2.5
Nov 3, 2024 09:41:38.635879040 CET	49705	15403	192.168.2.5	154.30.210.37
Nov 3, 2024 09:41:38.635983944 CET	9001	49709	87.162.115.145	192.168.2.5
Nov 3, 2024 09:41:38.636051893 CET	49709	9001	192.168.2.5	87.162.115.145
Nov 3, 2024 09:41:38.636234045 CET	49709	9001	192.168.2.5	87.162.115.145
Nov 3, 2024 09:41:38.641119957 CET	9001	49709	87.162.115.145	192.168.2.5
Nov 3, 2024 09:41:39.087528944 CET	49710	5268	192.168.2.5	167.172.128.225
Nov 3, 2024 09:41:39.092494965 CET	5268	49710	167.172.128.225	192.168.2.5
Nov 3, 2024 09:41:39.092585087 CET	49710	5268	192.168.2.5	167.172.128.225
Nov 3, 2024 09:41:39.092763901 CET	49710	5268	192.168.2.5	167.172.128.225
Nov 3, 2024 09:41:39.097517967 CET	5268	49710	167.172.128.225	192.168.2.5
Nov 3, 2024 09:41:39.711414099 CET	9001	49709	87.162.115.145	192.168.2.5
Nov 3, 2024 09:41:39.714957952 CET	49709	9001	192.168.2.5	87.162.115.145
Nov 3, 2024 09:41:39.719918013 CET	9001	49709	87.162.115.145	192.168.2.5
Nov 3, 2024 09:41:39.990782976 CET	5268	49710	167.172.128.225	192.168.2.5
Nov 3, 2024 09:41:39.993129015 CET	49710	5268	192.168.2.5	167.172.128.225
Nov 3, 2024 09:41:39.998034954 CET	5268	49710	167.172.128.225	192.168.2.5
Nov 3, 2024 09:41:40.026187897 CET	9001	49709	87.162.115.145	192.168.2.5
Nov 3, 2024 09:41:40.026523113 CET	49709	9001	192.168.2.5	87.162.115.145
Nov 3, 2024 09:41:40.031471014 CET	9001	49709	87.162.115.145	192.168.2.5
Nov 3, 2024 09:41:40.220854044 CET	5268	49710	167.172.128.225	192.168.2.5
Nov 3, 2024 09:41:40.223229885 CET	49710	5268	192.168.2.5	167.172.128.225
Nov 3, 2024 09:41:40.228065968 CET	5268	49710	167.172.128.225	192.168.2.5
Nov 3, 2024 09:41:40.338504076 CET	9001	49709	87.162.115.145	192.168.2.5
Nov 3, 2024 09:41:40.338524103 CET	9001	49709	87.162.115.145	192.168.2.5
Nov 3, 2024 09:41:40.338588953 CET	49709	9001	192.168.2.5	87.162.115.145
Nov 3, 2024 09:41:40.338697910 CET	49709	9001	192.168.2.5	87.162.115.145
Nov 3, 2024 09:41:40.339195013 CET	49711	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:40.343995094 CET	9001	49709	87.162.115.145	192.168.2.5
Nov 3, 2024 09:41:40.344588995 CET	80	49711	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:40.345463991 CET	49711	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:40.345527887 CET	49711	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:40.351433992 CET	80	49711	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:40.451251984 CET	5268	49710	167.172.128.225	192.168.2.5
Nov 3, 2024 09:41:40.451263905 CET	5268	49710	167.172.128.225	192.168.2.5
Nov 3, 2024 09:41:40.451319933 CET	49710	5268	192.168.2.5	167.172.128.225
Nov 3, 2024 09:41:40.451435089 CET	49710	5268	192.168.2.5	167.172.128.225
Nov 3, 2024 09:41:40.451968908 CET	49712	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:40.456188917 CET	5268	49710	167.172.128.225	192.168.2.5
Nov 3, 2024 09:41:40.456913948 CET	80	49712	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:40.457459927 CET	49712	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:40.457539082 CET	49712	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:40.462464094 CET	80	49712	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:41.405353069 CET	80	49711	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:41.405447960 CET	49711	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:41.405519962 CET	49711	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:41.406066895 CET	49713	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:41.410353899 CET	80	49711	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:41.410821915 CET	80	49713	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:41.410890102 CET	49713	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:41.410945892 CET	49713	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:41.418437958 CET	80	49713	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:41.525819063 CET	80	49712	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:41.525930882 CET	49712	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:41.526061058 CET	49712	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:41.526777029 CET	49714	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:41.530791998 CET	80	49712	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:41.531541109 CET	80	49714	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:41.531600952 CET	49714	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:41.531651974 CET	49714	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:41.536403894 CET	80	49714	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:42.191895008 CET	80	49713	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:42.192173958 CET	49713	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:42.192524910 CET	49713	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:42.197307110 CET	80	49713	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:42.200508118 CET	49715	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:42.205391884 CET	80	49715	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:42.205480099 CET	49715	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:42.205537081 CET	49715	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:42.210304976 CET	80	49715	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:42.302489042 CET	80	49714	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:42.302618027 CET	49714	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:42.302678108 CET	49714	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:42.303215027 CET	49716	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:42.307483912 CET	80	49714	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:42.307972908 CET	80	49716	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:42.308041096 CET	49716	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:42.308130026 CET	49716	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:42.312906027 CET	80	49716	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:42.967663050 CET	80	49715	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:42.967744112 CET	49715	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:42.967793941 CET	49715	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:42.968326092 CET	49709	9001	192.168.2.5	87.162.115.145
Nov 3, 2024 09:41:42.968353033 CET	49709	9001	192.168.2.5	87.162.115.145
Nov 3, 2024 09:41:42.969074965 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:42.972867012 CET	80	49715	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:42.973304987 CET	9001	49709	87.162.115.145	192.168.2.5
Nov 3, 2024 09:41:42.973699093 CET	9001	49709	87.162.115.145	192.168.2.5
Nov 3, 2024 09:41:42.973742962 CET	49709	9001	192.168.2.5	87.162.115.145
Nov 3, 2024 09:41:42.973925114 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:42.973989010 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:42.974172115 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:42.978887081 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:43.347700119 CET	80	49716	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:43.347937107 CET	49716	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:43.347937107 CET	49716	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:43.348426104 CET	49710	5268	192.168.2.5	167.172.128.225
Nov 3, 2024 09:41:43.348448038 CET	49710	5268	192.168.2.5	167.172.128.225
Nov 3, 2024 09:41:43.349009991 CET	49718	65535	192.168.2.5	143.110.156.176
Nov 3, 2024 09:41:43.352817059 CET	80	49716	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:43.353193045 CET	5268	49710	167.172.128.225	192.168.2.5
Nov 3, 2024 09:41:43.353614092 CET	5268	49710	167.172.128.225	192.168.2.5
Nov 3, 2024 09:41:43.353697062 CET	49710	5268	192.168.2.5	167.172.128.225
Nov 3, 2024 09:41:43.353734970 CET	65535	49718	143.110.156.176	192.168.2.5
Nov 3, 2024 09:41:43.353799105 CET	49718	65535	192.168.2.5	143.110.156.176
Nov 3, 2024 09:41:43.353935003 CET	49718	65535	192.168.2.5	143.110.156.176
Nov 3, 2024 09:41:43.358625889 CET	65535	49718	143.110.156.176	192.168.2.5
Nov 3, 2024 09:41:44.021996021 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:44.024540901 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:44.029421091 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:44.120861053 CET	65535	49718	143.110.156.176	192.168.2.5
Nov 3, 2024 09:41:44.122777939 CET	49718	65535	192.168.2.5	143.110.156.176
Nov 3, 2024 09:41:44.129508972 CET	65535	49718	143.110.156.176	192.168.2.5
Nov 3, 2024 09:41:44.287580013 CET	65535	49718	143.110.156.176	192.168.2.5
Nov 3, 2024 09:41:44.288127899 CET	49718	65535	192.168.2.5	143.110.156.176
Nov 3, 2024 09:41:44.292916059 CET	65535	49718	143.110.156.176	192.168.2.5
Nov 3, 2024 09:41:44.332767963 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:44.333221912 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:44.338095903 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:44.451199055 CET	65535	49718	143.110.156.176	192.168.2.5
Nov 3, 2024 09:41:44.451212883 CET	65535	49718	143.110.156.176	192.168.2.5
Nov 3, 2024 09:41:44.451390028 CET	49718	65535	192.168.2.5	143.110.156.176
Nov 3, 2024 09:41:44.451522112 CET	49718	65535	192.168.2.5	143.110.156.176
Nov 3, 2024 09:41:44.452018976 CET	49719	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:44.456485987 CET	65535	49718	143.110.156.176	192.168.2.5
Nov 3, 2024 09:41:44.456806898 CET	80	49719	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:44.456871986 CET	49719	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:44.456919909 CET	49719	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:44.461875916 CET	80	49719	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:44.638329029 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:44.638344049 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:44.638470888 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:44.638591051 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:44.639158964 CET	49720	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:44.643429041 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:44.644037008 CET	80	49720	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:44.644102097 CET	49720	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:44.644193888 CET	49720	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:44.649070978 CET	80	49720	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:45.521955013 CET	80	49719	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:45.522182941 CET	49719	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:45.524178028 CET	49719	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:45.529015064 CET	80	49719	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:45.531790972 CET	49721	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:45.536575079 CET	80	49721	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:45.536653996 CET	49721	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:45.539418936 CET	49721	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:45.544780016 CET	80	49721	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:45.694231033 CET	80	49720	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:45.694252014 CET	80	49720	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:45.694263935 CET	80	49720	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:45.694268942 CET	80	49720	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:45.694281101 CET	80	49720	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:45.694293022 CET	80	49720	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:45.694390059 CET	49720	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:45.694438934 CET	49720	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:45.842952967 CET	80	49720	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:45.843050003 CET	49720	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:45.843117952 CET	49720	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:45.843534946 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:45.847850084 CET	80	49720	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:45.848308086 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:46.150181055 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:46.151586056 CET	49722	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:46.156430006 CET	80	49722	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:46.156526089 CET	49722	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:46.156578064 CET	49722	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:46.161470890 CET	80	49722	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:46.205147028 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:46.601953983 CET	80	49721	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:46.602018118 CET	49721	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:46.602097988 CET	49721	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:46.602675915 CET	49723	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:46.606843948 CET	80	49721	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:46.607625961 CET	80	49723	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:46.607709885 CET	49723	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:46.607928038 CET	49723	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:46.612693071 CET	80	49723	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:47.221659899 CET	80	49722	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:47.221723080 CET	49722	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:47.221771002 CET	49722	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:47.222230911 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:47.226701021 CET	80	49722	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:47.227011919 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:47.227066040 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:47.227125883 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:47.232176065 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:47.301706076 CET	49726	443	192.168.2.5	23.129.64.215
Nov 3, 2024 09:41:47.301731110 CET	443	49726	23.129.64.215	192.168.2.5
Nov 3, 2024 09:41:47.301798105 CET	49726	443	192.168.2.5	23.129.64.215
Nov 3, 2024 09:41:47.301968098 CET	49726	443	192.168.2.5	23.129.64.215
Nov 3, 2024 09:41:47.301980019 CET	443	49726	23.129.64.215	192.168.2.5
Nov 3, 2024 09:41:47.382375956 CET	80	49723	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:47.382388115 CET	80	49723	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:47.382493973 CET	80	49723	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:47.382661104 CET	49723	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:47.382661104 CET	49723	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:47.382736921 CET	49723	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:47.383163929 CET	49718	65535	192.168.2.5	143.110.156.176
Nov 3, 2024 09:41:47.383183002 CET	49718	65535	192.168.2.5	143.110.156.176
Nov 3, 2024 09:41:47.383621931 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:47.387640953 CET	80	49723	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:47.387959003 CET	65535	49718	143.110.156.176	192.168.2.5
Nov 3, 2024 09:41:47.388384104 CET	65535	49718	143.110.156.176	192.168.2.5
Nov 3, 2024 09:41:47.388431072 CET	49718	65535	192.168.2.5	143.110.156.176
Nov 3, 2024 09:41:47.388439894 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:47.388497114 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:47.388612032 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:47.393413067 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:48.284531116 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:48.284619093 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:48.284630060 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:48.284641027 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:48.284656048 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:48.284667969 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:48.284678936 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:48.284691095 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:48.284753084 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:48.302594900 CET	443	49726	23.129.64.215	192.168.2.5
Nov 3, 2024 09:41:48.302675009 CET	49726	443	192.168.2.5	23.129.64.215
Nov 3, 2024 09:41:48.371509075 CET	49726	443	192.168.2.5	23.129.64.215
Nov 3, 2024 09:41:48.371525049 CET	443	49726	23.129.64.215	192.168.2.5
Nov 3, 2024 09:41:48.372548103 CET	443	49726	23.129.64.215	192.168.2.5
Nov 3, 2024 09:41:48.374650955 CET	49726	443	192.168.2.5	23.129.64.215
Nov 3, 2024 09:41:48.415344954 CET	443	49726	23.129.64.215	192.168.2.5
Nov 3, 2024 09:41:48.437947989 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:48.439549923 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:48.442054033 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:48.446894884 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:48.475117922 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:48.480915070 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:48.557539940 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:48.578135967 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:48.583168030 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:48.928980112 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:48.934710026 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:48.939702988 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:49.061291933 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:49.061791897 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:49.066673040 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:49.271431923 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:49.271878004 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:49.276787043 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:49.437376976 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:49.437441111 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:49.437500000 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:49.437660933 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:49.438349962 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:49.442420006 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:49.443157911 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:49.443229914 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:49.443335056 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:49.448134899 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:49.577950001 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:49.579277992 CET	49734	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:49.584321976 CET	80	49734	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:49.584413052 CET	49734	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:49.584502935 CET	49734	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:49.589402914 CET	80	49734	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:49.626961946 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:50.213671923 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.213706017 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.213716984 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.213731050 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.213742971 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.213769913 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.213789940 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.213802099 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.213813066 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.213815928 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.213824034 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.213834047 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.213836908 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.213864088 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.214037895 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.218671083 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.218722105 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.218733072 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.218854904 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.346477985 CET	80	49734	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.346785069 CET	49734	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.346785069 CET	49734	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.347291946 CET	49736	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:50.351699114 CET	80	49734	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.352078915 CET	80	49736	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:50.352801085 CET	49736	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:50.352857113 CET	49736	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:50.357681036 CET	80	49736	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:50.362688065 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.362700939 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.362711906 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.362723112 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.362740993 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.362750053 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.362850904 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.362916946 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.362993002 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.363141060 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.363141060 CET	49731	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:50.363612890 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:50.367955923 CET	80	49731	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:50.368400097 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:50.703130960 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:50.704664946 CET	49737	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:50.709604979 CET	80	49737	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:50.709748030 CET	49737	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:50.709748030 CET	49737	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:50.714582920 CET	80	49737	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:50.751965046 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:51.415266037 CET	80	49736	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:51.415347099 CET	49736	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:51.415394068 CET	49736	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:51.415894985 CET	49744	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:51.420283079 CET	80	49736	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:51.420757055 CET	80	49744	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:51.420962095 CET	49744	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:51.421022892 CET	49744	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:51.425887108 CET	80	49744	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:51.740190029 CET	80	49737	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:51.740282059 CET	49737	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:51.740356922 CET	49737	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:51.740940094 CET	49746	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:51.745233059 CET	80	49737	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:51.745723009 CET	80	49746	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:51.745781898 CET	49746	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:51.745892048 CET	49746	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:51.750683069 CET	80	49746	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:52.470674038 CET	80	49744	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:52.470808029 CET	49744	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:52.470964909 CET	49744	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:52.470987082 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:52.475760937 CET	80	49744	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:52.475775003 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:52.475826025 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:52.480612040 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:52.787395000 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:52.788422108 CET	49753	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:52.793423891 CET	80	49753	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:52.794059992 CET	49753	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:52.794140100 CET	49753	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:52.799058914 CET	80	49753	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:52.803591967 CET	80	49746	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:52.805481911 CET	49746	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:52.805526018 CET	49746	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:52.805881977 CET	49754	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:52.810369968 CET	80	49746	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:52.810686111 CET	80	49754	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:52.810775042 CET	49754	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:52.810837030 CET	49754	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:52.815608025 CET	80	49754	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:52.830168962 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:53.820596933 CET	80	49753	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:53.820724010 CET	49753	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:53.820770979 CET	49753	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:53.821309090 CET	49760	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:53.825633049 CET	80	49753	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:53.826139927 CET	80	49760	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:53.826234102 CET	49760	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:53.826287031 CET	49760	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:53.831104994 CET	80	49760	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:53.853035927 CET	80	49754	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:53.853075027 CET	80	49754	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:53.853086948 CET	80	49754	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:53.853113890 CET	80	49754	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:53.853200912 CET	49754	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:53.853262901 CET	49754	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:53.998923063 CET	80	49754	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:53.998991013 CET	49754	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:53.999171972 CET	49754	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:53.999638081 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:54.004328966 CET	80	49754	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:54.004426956 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:54.601752043 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:54.602840900 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:54.607620001 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:54.887902021 CET	80	49760	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:54.888024092 CET	49760	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:54.888098955 CET	49760	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:54.888524055 CET	49766	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:54.892899036 CET	80	49760	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:54.893320084 CET	80	49766	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:54.893378019 CET	49766	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:54.893480062 CET	49766	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:54.898297071 CET	80	49766	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:54.971234083 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:54.971606970 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:54.976466894 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:55.308130026 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:55.361383915 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:55.369096994 CET	49767	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:55.374047995 CET	80	49767	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:55.374154091 CET	49767	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:55.374502897 CET	49767	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:55.379455090 CET	80	49767	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:55.942327976 CET	80	49766	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:55.942342997 CET	80	49766	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:55.942354918 CET	80	49766	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:55.942389011 CET	49766	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:55.986367941 CET	49766	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:56.091166973 CET	80	49766	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:56.091283083 CET	49766	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:56.091357946 CET	49766	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:56.091738939 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:56.096158981 CET	80	49766	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:56.096543074 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:56.139002085 CET	80	49767	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:56.139163017 CET	80	49767	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:56.139203072 CET	80	49767	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:56.139214993 CET	80	49767	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:56.139266014 CET	49767	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:56.139307022 CET	49767	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:56.147175074 CET	80	49767	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:56.147250891 CET	49767	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:56.147303104 CET	49767	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:56.147691965 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:56.152206898 CET	80	49767	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:56.152564049 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:56.583090067 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:56.583683014 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:56.588452101 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:56.713845968 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:56.714462042 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:56.719336987 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:56.925733089 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:56.925971985 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:56.930953979 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:57.088397026 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:57.088598967 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:57.093468904 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:57.265012980 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:57.265448093 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:57.270354986 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:57.270422935 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:57.275239944 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:57.502898932 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:57.503284931 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:57.508095026 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:57.508152962 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:57.513406038 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:57.579212904 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:57.580415964 CET	49778	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:57.585294962 CET	80	49778	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:57.585362911 CET	49778	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:57.585419893 CET	49778	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:57.590192080 CET	80	49778	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:57.626996994 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:57.925484896 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:41:57.926702023 CET	49779	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:57.931461096 CET	80	49779	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:57.931523085 CET	49779	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:57.931607962 CET	49779	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:57.936326027 CET	80	49779	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:57.970698118 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:41:58.358664036 CET	80	49778	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:58.358747005 CET	49778	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:58.359878063 CET	49778	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:58.363719940 CET	49783	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:58.364739895 CET	80	49778	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:58.368593931 CET	80	49783	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:58.368669033 CET	49783	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:58.370955944 CET	49783	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:58.375967979 CET	80	49783	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:58.701133013 CET	80	49779	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:58.701203108 CET	49779	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:58.701246023 CET	49779	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:41:58.706120014 CET	80	49779	216.218.219.41	192.168.2.5
Nov 3, 2024 09:41:58.709095001 CET	49786	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:58.713879108 CET	80	49786	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:58.713953018 CET	49786	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:58.714037895 CET	49786	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:58.718827009 CET	80	49786	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:59.420244932 CET	80	49783	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:59.420258045 CET	80	49783	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:59.420268059 CET	80	49783	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:59.420279026 CET	80	49783	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:59.420289993 CET	80	49783	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:59.420339108 CET	49783	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:59.420386076 CET	49783	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:59.570677996 CET	80	49783	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:59.570760965 CET	49783	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:59.570841074 CET	49783	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:59.571283102 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:41:59.575659037 CET	80	49783	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:59.576216936 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:41:59.771039009 CET	80	49786	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:59.771219015 CET	49786	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:59.771219015 CET	49786	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:41:59.771614075 CET	49792	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:59.776031017 CET	80	49786	193.23.244.244	192.168.2.5
Nov 3, 2024 09:41:59.776407957 CET	80	49792	45.66.35.11	192.168.2.5
Nov 3, 2024 09:41:59.776463985 CET	49792	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:59.776515961 CET	49792	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:41:59.781941891 CET	80	49792	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:00.386101007 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:00.386703014 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:00.391572952 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:00.778654099 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:00.778892994 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:00.783736944 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:01.169543028 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:01.220701933 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:01.313540936 CET	80	49792	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:01.313757896 CET	80	49792	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:01.313782930 CET	80	49792	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:01.313852072 CET	49792	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:01.321471930 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:01.321659088 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:01.326450109 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:01.326522112 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:01.331429958 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:01.462768078 CET	80	49792	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:01.464646101 CET	49792	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:01.464693069 CET	49792	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:01.465070963 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:01.469585896 CET	80	49792	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:01.469830990 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:01.635850906 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:01.636943102 CET	49801	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:01.642803907 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:01.643086910 CET	49801	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:01.643145084 CET	49801	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:01.649200916 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:01.689481020 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:02.094688892 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:02.095367908 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:02.100198030 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:02.398400068 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.398437977 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.398457050 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.398495913 CET	49801	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:02.398529053 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.398541927 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.398552895 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.398576021 CET	49801	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:02.398585081 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.398596048 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.398605108 CET	49801	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:02.398607969 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.398621082 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.398633003 CET	49801	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:02.398663998 CET	49801	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:02.403350115 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.403362989 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.403373003 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.403402090 CET	49801	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:02.408056974 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.408116102 CET	49801	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:02.408217907 CET	49801	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:02.408454895 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:02.412926912 CET	80	49801	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:02.413242102 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:02.413297892 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:02.418126106 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:02.519298077 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:02.519623041 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:02.525655985 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:02.719666958 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:02.720736027 CET	49807	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:02.726349115 CET	80	49807	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:02.726404905 CET	49807	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:02.726516962 CET	49807	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:02.731359005 CET	80	49807	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:02.767601013 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:03.036349058 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:03.036690950 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:03.041457891 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:03.041533947 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:03.046331882 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:03.424086094 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:03.425199032 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:03.430140018 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:03.430232048 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:03.430289030 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:03.435251951 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:03.470731020 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:03.778636932 CET	80	49807	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:03.778696060 CET	49807	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:03.778752089 CET	49807	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:03.779227972 CET	49814	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:03.784624100 CET	80	49807	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:03.784949064 CET	80	49814	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:03.785015106 CET	49814	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:03.785096884 CET	49814	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:03.790962934 CET	80	49814	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.208641052 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.208667994 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.208679914 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.208718061 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.208734989 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:04.208775997 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:04.216466904 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.216538906 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:04.216574907 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:04.216964006 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:04.221478939 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.221785069 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:04.558005095 CET	80	49814	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.558031082 CET	80	49814	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.558042049 CET	80	49814	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.558056116 CET	80	49814	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.560843945 CET	49814	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:04.566801071 CET	80	49814	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.566859007 CET	49814	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:04.566900969 CET	49814	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:04.567292929 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:04.571700096 CET	80	49814	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:04.572140932 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:05.016819000 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:05.017483950 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:05.022346973 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:05.346296072 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:05.346560955 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:05.351536036 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:05.678612947 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:05.678795099 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:05.684187889 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:05.684238911 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:05.689479113 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:05.757075071 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:05.757735014 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:05.762610912 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:05.989315987 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:05.990242958 CET	49823	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:05.995068073 CET	80	49823	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:05.995249033 CET	49823	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:05.995249033 CET	49823	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:06.000097990 CET	80	49823	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:06.033327103 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:06.212651968 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:06.212887049 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:06.217787981 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:06.746002913 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:06.749145985 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:06.754055977 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:06.754110098 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:06.759166956 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:07.069556952 CET	80	49823	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:07.069628954 CET	49823	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:07.076258898 CET	49823	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:07.076822042 CET	49827	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:07.081156969 CET	80	49823	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:07.081629038 CET	80	49827	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:07.081707954 CET	49827	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:07.082775116 CET	49827	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:07.087567091 CET	80	49827	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:07.098555088 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:07.101746082 CET	49828	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:07.106630087 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:07.106704950 CET	49828	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:07.106770992 CET	49828	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:07.111587048 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:07.142596960 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:08.152750015 CET	80	49827	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.152816057 CET	49827	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.152875900 CET	49827	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.153383970 CET	49834	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.157654047 CET	80	49827	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.158185005 CET	80	49834	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.158258915 CET	49834	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.158309937 CET	49834	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.163146019 CET	80	49834	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.178740025 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.178910971 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.178921938 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.178932905 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.178945065 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.178956032 CET	49828	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.178956985 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.178978920 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.178992987 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.179003000 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.179006100 CET	49828	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.179020882 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.179030895 CET	49828	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.179068089 CET	49828	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.183847904 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.183914900 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.183959961 CET	49828	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.328500032 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.328562021 CET	49828	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.328612089 CET	49828	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.328798056 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:08.333573103 CET	80	49828	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.333626032 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:08.333667994 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:08.338993073 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:08.698244095 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:08.699333906 CET	49839	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.704184055 CET	80	49839	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.704269886 CET	49839	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.704339027 CET	49839	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:08.709108114 CET	80	49839	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:08.751961946 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:09.229273081 CET	80	49834	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:09.229382992 CET	49834	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:09.229453087 CET	49834	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:09.229513884 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:09.229849100 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:09.234318972 CET	80	49834	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:09.234329939 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:09.234600067 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:09.235375881 CET	9100	49717	185.220.101.72	192.168.2.5
Nov 3, 2024 09:42:09.235424995 CET	49717	9100	192.168.2.5	185.220.101.72
Nov 3, 2024 09:42:09.788053036 CET	80	49839	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:09.788127899 CET	49839	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:09.788554907 CET	49839	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:09.792433977 CET	49845	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:09.793344975 CET	80	49839	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:09.797301054 CET	80	49845	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:09.797363043 CET	49845	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:09.799597025 CET	49845	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:09.804426908 CET	80	49845	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:10.851512909 CET	80	49845	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:10.851571083 CET	49845	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:10.851615906 CET	49845	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:10.852097988 CET	49851	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:10.856493950 CET	80	49845	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:10.856914997 CET	80	49851	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:10.856975079 CET	49851	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:10.857088089 CET	49851	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:10.862107992 CET	80	49851	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:11.909024000 CET	80	49851	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:11.909518003 CET	49851	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:11.909562111 CET	49851	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:11.909638882 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:11.914506912 CET	80	49851	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:11.914520025 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:11.914598942 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:11.919868946 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:12.260272980 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:12.262439966 CET	49858	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:12.267430067 CET	80	49858	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:12.267689943 CET	49858	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:12.267961025 CET	49858	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:12.273022890 CET	80	49858	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:12.314466000 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:13.323195934 CET	80	49858	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:13.323268890 CET	80	49858	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:13.323324919 CET	49858	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:13.468991041 CET	80	49858	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:13.469089985 CET	49858	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:13.469173908 CET	49858	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:13.469706059 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:13.473990917 CET	80	49858	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:13.474544048 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:14.333192110 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:14.333832979 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:14.338810921 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:14.755350113 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:14.755604029 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:14.761274099 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:15.630409002 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:15.673842907 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:15.839162111 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:15.839451075 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:15.839951038 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:15.844824076 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:15.845359087 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:15.845875978 CET	110	49727	45.141.215.40	192.168.2.5
Nov 3, 2024 09:42:15.845927954 CET	49727	110	192.168.2.5	45.141.215.40
Nov 3, 2024 09:42:18.378082037 CET	49886	9024	192.168.2.5	130.61.142.133
Nov 3, 2024 09:42:18.382920980 CET	9024	49886	130.61.142.133	192.168.2.5
Nov 3, 2024 09:42:18.382983923 CET	49886	9024	192.168.2.5	130.61.142.133
Nov 3, 2024 09:42:18.385356903 CET	49886	9024	192.168.2.5	130.61.142.133
Nov 3, 2024 09:42:18.390116930 CET	9024	49886	130.61.142.133	192.168.2.5
Nov 3, 2024 09:42:21.332088947 CET	9024	49886	130.61.142.133	192.168.2.5
Nov 3, 2024 09:42:21.367873907 CET	49886	9024	192.168.2.5	130.61.142.133
Nov 3, 2024 09:42:21.372811079 CET	9024	49886	130.61.142.133	192.168.2.5
Nov 3, 2024 09:42:21.675801992 CET	9024	49886	130.61.142.133	192.168.2.5
Nov 3, 2024 09:42:21.676151991 CET	49886	9024	192.168.2.5	130.61.142.133
Nov 3, 2024 09:42:21.681011915 CET	9024	49886	130.61.142.133	192.168.2.5
Nov 3, 2024 09:42:21.977860928 CET	9024	49886	130.61.142.133	192.168.2.5
Nov 3, 2024 09:42:21.977876902 CET	9024	49886	130.61.142.133	192.168.2.5
Nov 3, 2024 09:42:21.978029013 CET	49886	9024	192.168.2.5	130.61.142.133
Nov 3, 2024 09:42:21.978064060 CET	49886	9024	192.168.2.5	130.61.142.133
Nov 3, 2024 09:42:21.978508949 CET	49904	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:21.982968092 CET	9024	49886	130.61.142.133	192.168.2.5
Nov 3, 2024 09:42:21.983305931 CET	80	49904	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:21.983371973 CET	49904	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:21.983467102 CET	49904	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:21.988231897 CET	80	49904	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:22.743839025 CET	80	49904	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:22.743863106 CET	80	49904	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:22.743875980 CET	80	49904	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:22.743892908 CET	80	49904	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:22.743944883 CET	49904	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:22.743992090 CET	49904	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:22.744045973 CET	49904	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:22.744626999 CET	49886	9024	192.168.2.5	130.61.142.133
Nov 3, 2024 09:42:22.744656086 CET	49886	9024	192.168.2.5	130.61.142.133
Nov 3, 2024 09:42:22.745197058 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:22.748992920 CET	80	49904	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:22.749485016 CET	9024	49886	130.61.142.133	192.168.2.5
Nov 3, 2024 09:42:22.750036955 CET	9024	49886	130.61.142.133	192.168.2.5
Nov 3, 2024 09:42:22.750085115 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:22.750091076 CET	49886	9024	192.168.2.5	130.61.142.133
Nov 3, 2024 09:42:22.750150919 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:22.750325918 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:22.755182981 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:23.648691893 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:23.651241064 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:23.656455994 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:23.878953934 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:23.879400969 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:23.884191036 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:24.103416920 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:24.103465080 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:24.103543043 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:24.110985041 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:24.111849070 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:24.112366915 CET	49915	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:24.116682053 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:24.117100000 CET	80	49915	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:24.117166996 CET	49915	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:24.117655993 CET	49915	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:24.122452974 CET	80	49915	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:24.886337042 CET	80	49915	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:24.886414051 CET	49915	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:24.886468887 CET	49915	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:42:24.887058020 CET	49919	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:24.891304016 CET	80	49915	216.218.219.41	192.168.2.5
Nov 3, 2024 09:42:24.891819000 CET	80	49919	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:24.891887903 CET	49919	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:24.891963959 CET	49919	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:24.896707058 CET	80	49919	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:25.918348074 CET	80	49919	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:25.918361902 CET	80	49919	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:25.918373108 CET	80	49919	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:25.918407917 CET	49919	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:25.970757961 CET	49919	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:26.064030886 CET	80	49919	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:26.064115047 CET	49919	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:26.064160109 CET	49919	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:26.064516068 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:26.069938898 CET	80	49919	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:26.070007086 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:26.302097082 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:26.303416014 CET	49926	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:26.308320999 CET	80	49926	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:26.308387995 CET	49926	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:26.308443069 CET	49926	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:26.313261032 CET	80	49926	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:26.345776081 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:27.365215063 CET	80	49926	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:27.365307093 CET	49926	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:27.365571022 CET	49926	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:27.366219997 CET	49932	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:27.370382071 CET	80	49926	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:27.371156931 CET	80	49932	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:27.371226072 CET	49932	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:27.371567965 CET	49932	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:27.376285076 CET	80	49932	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:28.409725904 CET	80	49932	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:28.409740925 CET	80	49932	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:28.409750938 CET	80	49932	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:28.409786940 CET	49932	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:28.410986900 CET	80	49932	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:28.411014080 CET	80	49932	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:28.411058903 CET	49932	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:28.411147118 CET	49932	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:28.411513090 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:28.411695957 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:28.412206888 CET	49938	9001	192.168.2.5	185.173.93.47
Nov 3, 2024 09:42:28.415977001 CET	80	49932	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:28.416364908 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:28.416870117 CET	9046	49907	24.15.40.173	192.168.2.5
Nov 3, 2024 09:42:28.416927099 CET	49907	9046	192.168.2.5	24.15.40.173
Nov 3, 2024 09:42:28.420701981 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:28.420761108 CET	49938	9001	192.168.2.5	185.173.93.47
Nov 3, 2024 09:42:28.420902014 CET	49938	9001	192.168.2.5	185.173.93.47
Nov 3, 2024 09:42:28.425645113 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:29.671396971 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:29.672800064 CET	49938	9001	192.168.2.5	185.173.93.47
Nov 3, 2024 09:42:29.677962065 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:30.078708887 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:30.083662987 CET	49938	9001	192.168.2.5	185.173.93.47
Nov 3, 2024 09:42:30.088502884 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:30.490353107 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:30.490367889 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:30.490442991 CET	49938	9001	192.168.2.5	185.173.93.47
Nov 3, 2024 09:42:30.492161989 CET	49938	9001	192.168.2.5	185.173.93.47
Nov 3, 2024 09:42:30.495776892 CET	49948	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:30.497045994 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:30.500684977 CET	80	49948	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:30.500768900 CET	49948	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:30.503031969 CET	49948	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:30.507921934 CET	80	49948	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:31.547535896 CET	80	49948	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:31.547568083 CET	80	49948	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:31.547625065 CET	49948	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:31.695753098 CET	80	49948	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:31.697529078 CET	49948	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:31.697561026 CET	49948	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:31.697873116 CET	49938	9001	192.168.2.5	185.173.93.47
Nov 3, 2024 09:42:31.702951908 CET	80	49948	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:31.703022957 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:32.115571022 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:32.116086006 CET	49938	9001	192.168.2.5	185.173.93.47
Nov 3, 2024 09:42:32.116282940 CET	49938	9001	192.168.2.5	185.173.93.47
Nov 3, 2024 09:42:32.120975018 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:32.121686935 CET	9001	49938	185.173.93.47	192.168.2.5
Nov 3, 2024 09:42:32.121737957 CET	49938	9001	192.168.2.5	185.173.93.47
Nov 3, 2024 09:42:39.237164974 CET	49988	443	192.168.2.5	94.23.172.32
Nov 3, 2024 09:42:39.237210989 CET	443	49988	94.23.172.32	192.168.2.5
Nov 3, 2024 09:42:39.237510920 CET	49988	443	192.168.2.5	94.23.172.32
Nov 3, 2024 09:42:39.237538099 CET	49988	443	192.168.2.5	94.23.172.32
Nov 3, 2024 09:42:39.237543106 CET	443	49988	94.23.172.32	192.168.2.5
Nov 3, 2024 09:42:40.596164942 CET	443	49988	94.23.172.32	192.168.2.5
Nov 3, 2024 09:42:40.596240044 CET	49988	443	192.168.2.5	94.23.172.32
Nov 3, 2024 09:42:40.597896099 CET	49988	443	192.168.2.5	94.23.172.32
Nov 3, 2024 09:42:40.597907066 CET	443	49988	94.23.172.32	192.168.2.5
Nov 3, 2024 09:42:40.598107100 CET	443	49988	94.23.172.32	192.168.2.5
Nov 3, 2024 09:42:40.598388910 CET	49988	443	192.168.2.5	94.23.172.32
Nov 3, 2024 09:42:40.643347979 CET	443	49988	94.23.172.32	192.168.2.5
Nov 3, 2024 09:42:46.002892971 CET	50013	9000	192.168.2.5	45.141.215.17
Nov 3, 2024 09:42:46.008138895 CET	9000	50013	45.141.215.17	192.168.2.5
Nov 3, 2024 09:42:46.008229971 CET	50013	9000	192.168.2.5	45.141.215.17
Nov 3, 2024 09:42:46.008445024 CET	50013	9000	192.168.2.5	45.141.215.17
Nov 3, 2024 09:42:46.013250113 CET	9000	50013	45.141.215.17	192.168.2.5
Nov 3, 2024 09:42:47.141273975 CET	9000	50013	45.141.215.17	192.168.2.5
Nov 3, 2024 09:42:47.142760038 CET	50013	9000	192.168.2.5	45.141.215.17
Nov 3, 2024 09:42:47.147845030 CET	9000	50013	45.141.215.17	192.168.2.5
Nov 3, 2024 09:42:47.493875027 CET	9000	50013	45.141.215.17	192.168.2.5
Nov 3, 2024 09:42:47.499330044 CET	50013	9000	192.168.2.5	45.141.215.17
Nov 3, 2024 09:42:47.504215956 CET	9000	50013	45.141.215.17	192.168.2.5
Nov 3, 2024 09:42:47.835561991 CET	9000	50013	45.141.215.17	192.168.2.5
Nov 3, 2024 09:42:47.835577965 CET	9000	50013	45.141.215.17	192.168.2.5
Nov 3, 2024 09:42:47.835630894 CET	50013	9000	192.168.2.5	45.141.215.17
Nov 3, 2024 09:42:47.837716103 CET	50013	9000	192.168.2.5	45.141.215.17
Nov 3, 2024 09:42:47.841439962 CET	50024	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:47.842621088 CET	9000	50013	45.141.215.17	192.168.2.5
Nov 3, 2024 09:42:47.846401930 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:47.846493006 CET	50024	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:47.848431110 CET	50024	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:47.853281975 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.896330118 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.896344900 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.896356106 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.896378040 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.896389961 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.896406889 CET	50024	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:48.896433115 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.896445036 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.896456003 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.896460056 CET	50024	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:48.896472931 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.896481991 CET	50024	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:48.896485090 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.896500111 CET	50024	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:48.896523952 CET	50024	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:48.901340961 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:48.955122948 CET	50024	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:49.041388988 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:49.041459084 CET	50024	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:49.041523933 CET	50024	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:49.042172909 CET	50013	9000	192.168.2.5	45.141.215.17
Nov 3, 2024 09:42:49.042197943 CET	50013	9000	192.168.2.5	45.141.215.17
Nov 3, 2024 09:42:49.042748928 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:49.046324968 CET	80	50024	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:49.047013044 CET	9000	50013	45.141.215.17	192.168.2.5
Nov 3, 2024 09:42:49.047637939 CET	9000	50013	45.141.215.17	192.168.2.5
Nov 3, 2024 09:42:49.047651052 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:49.047696114 CET	50013	9000	192.168.2.5	45.141.215.17
Nov 3, 2024 09:42:49.047750950 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:49.047976971 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:49.052735090 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:49.946608067 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:49.948026896 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:49.952959061 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:50.170782089 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:50.220741034 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:50.226636887 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:50.231443882 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:50.449723959 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:50.449851990 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:50.449907064 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:50.452044964 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:50.456882954 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:50.463215113 CET	50036	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:50.468116999 CET	80	50036	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:50.468209028 CET	50036	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:50.469929934 CET	50036	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:50.474740028 CET	80	50036	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:51.528904915 CET	80	50036	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:51.528920889 CET	80	50036	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:51.528929949 CET	80	50036	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:51.528990984 CET	50036	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:51.580122948 CET	50036	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:51.682387114 CET	80	50036	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:51.682497025 CET	50036	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:51.682559013 CET	50036	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:51.682890892 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:51.687463999 CET	80	50036	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:51.687694073 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:51.913331985 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:51.914513111 CET	50044	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:51.920046091 CET	80	50044	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:51.920119047 CET	50044	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:51.920165062 CET	50044	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:51.924946070 CET	80	50044	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:51.955234051 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:52.969497919 CET	80	50044	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:52.969563961 CET	50044	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:52.969614029 CET	50044	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:42:52.970081091 CET	50045	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:52.974411011 CET	80	50044	193.23.244.244	192.168.2.5
Nov 3, 2024 09:42:52.974896908 CET	80	50045	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:52.974956036 CET	50045	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:52.975053072 CET	50045	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:52.979840994 CET	80	50045	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:54.035022020 CET	80	50045	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:54.035106897 CET	50045	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:54.035164118 CET	50045	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:54.035698891 CET	50046	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:54.039921999 CET	80	50045	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:54.040508032 CET	80	50046	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:54.040586948 CET	50046	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:54.040664911 CET	50046	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:54.045469999 CET	80	50046	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:55.094543934 CET	80	50046	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:55.094588995 CET	80	50046	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:55.094602108 CET	80	50046	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:55.094613075 CET	80	50046	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:55.094669104 CET	50046	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:55.094669104 CET	50046	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:55.243521929 CET	80	50046	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:55.243626118 CET	50046	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:55.243674994 CET	50046	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:42:55.244065046 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:55.248500109 CET	80	50046	45.66.35.11	192.168.2.5
Nov 3, 2024 09:42:55.248842001 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:55.568027973 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:55.568846941 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:55.573774099 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:55.896609068 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:55.926027060 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:55.930891991 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:56.148951054 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:56.149734020 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:56.154561996 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:56.473678112 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:56.481236935 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:56.486167908 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:56.808619976 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:56.808871031 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:56.813659906 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:57.128906012 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:57.173979998 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:57.224407911 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:57.224636078 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:57.229620934 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:57.229681969 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:57.234628916 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:57.455902100 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:57.456676960 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:57.461601019 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:57.813399076 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:57.814870119 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:57.819694996 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:58.143402100 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:58.143640041 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:58.148485899 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:58.478482962 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:58.478717089 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:58.483613014 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:58.483675003 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:58.488514900 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:58.709613085 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:58.726968050 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:58.732031107 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:58.962723017 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:58.973596096 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:58.978480101 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:59.207012892 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:59.207254887 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:59.211992025 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:59.444039106 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:59.444278955 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:59.449208021 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:59.449270964 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:59.454168081 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:59.672369957 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:59.673008919 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:59.677879095 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:59.677927971 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:59.682821035 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:59.902796030 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:59.903506994 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:59.908519983 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:42:59.908590078 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:42:59.913712978 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:00.135476112 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:00.136455059 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:43:00.141233921 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:00.463124037 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:00.463916063 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:43:00.468707085 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:00.776685953 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:00.776954889 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:43:00.782444954 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:01.088334084 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:01.142698050 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:43:01.172009945 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:01.172743082 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:43:01.173484087 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:43:01.177659035 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:01.178261995 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:01.178567886 CET	9002	50030	54.39.234.91	192.168.2.5
Nov 3, 2024 09:43:01.178618908 CET	50030	9002	192.168.2.5	54.39.234.91
Nov 3, 2024 09:43:02.143656969 CET	50047	30443	192.168.2.5	78.98.16.20
Nov 3, 2024 09:43:02.148531914 CET	30443	50047	78.98.16.20	192.168.2.5
Nov 3, 2024 09:43:02.148607969 CET	50047	30443	192.168.2.5	78.98.16.20
Nov 3, 2024 09:43:02.148802996 CET	50047	30443	192.168.2.5	78.98.16.20
Nov 3, 2024 09:43:02.153548956 CET	30443	50047	78.98.16.20	192.168.2.5
Nov 3, 2024 09:43:03.244822979 CET	30443	50047	78.98.16.20	192.168.2.5
Nov 3, 2024 09:43:03.246361971 CET	50047	30443	192.168.2.5	78.98.16.20
Nov 3, 2024 09:43:03.251341105 CET	30443	50047	78.98.16.20	192.168.2.5
Nov 3, 2024 09:43:03.571377039 CET	30443	50047	78.98.16.20	192.168.2.5
Nov 3, 2024 09:43:03.572144032 CET	50047	30443	192.168.2.5	78.98.16.20
Nov 3, 2024 09:43:03.577518940 CET	30443	50047	78.98.16.20	192.168.2.5
Nov 3, 2024 09:43:03.898271084 CET	30443	50047	78.98.16.20	192.168.2.5
Nov 3, 2024 09:43:03.898300886 CET	30443	50047	78.98.16.20	192.168.2.5
Nov 3, 2024 09:43:03.898350000 CET	50047	30443	192.168.2.5	78.98.16.20
Nov 3, 2024 09:43:03.898448944 CET	50047	30443	192.168.2.5	78.98.16.20
Nov 3, 2024 09:43:03.898925066 CET	50048	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:03.903189898 CET	30443	50047	78.98.16.20	192.168.2.5
Nov 3, 2024 09:43:03.903687000 CET	80	50048	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:03.903748035 CET	50048	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:03.903832912 CET	50048	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:03.908587933 CET	80	50048	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:04.959202051 CET	80	50048	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:04.961622953 CET	50048	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:04.969921112 CET	50048	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:04.970484018 CET	50049	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:04.974788904 CET	80	50048	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:04.975363970 CET	80	50049	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:04.975464106 CET	50049	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:04.975573063 CET	50049	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:04.980384111 CET	80	50049	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:06.046982050 CET	80	50049	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:06.047075987 CET	50049	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:06.047128916 CET	50049	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:06.047626019 CET	50050	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:06.051883936 CET	80	50049	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:06.052383900 CET	80	50050	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:06.052556992 CET	50050	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:06.052680016 CET	50050	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:06.057409048 CET	80	50050	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:06.819360971 CET	80	50050	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:06.819457054 CET	50050	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:06.819698095 CET	50050	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:06.820405006 CET	50047	30443	192.168.2.5	78.98.16.20
Nov 3, 2024 09:43:06.820467949 CET	50047	30443	192.168.2.5	78.98.16.20
Nov 3, 2024 09:43:06.821501017 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:06.824675083 CET	80	50050	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:06.825416088 CET	30443	50047	78.98.16.20	192.168.2.5
Nov 3, 2024 09:43:06.825720072 CET	30443	50047	78.98.16.20	192.168.2.5
Nov 3, 2024 09:43:06.825795889 CET	50047	30443	192.168.2.5	78.98.16.20
Nov 3, 2024 09:43:06.826394081 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:06.826503992 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:06.826939106 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:06.831902027 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:07.922189951 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:07.925801992 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:07.930926085 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:08.252537966 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:08.252947092 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:08.257884979 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:08.576531887 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:08.576551914 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:08.576673031 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:08.576807976 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:08.577313900 CET	50052	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:08.581918955 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:08.582843065 CET	80	50052	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:08.582914114 CET	50052	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:08.582976103 CET	50052	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:08.588119030 CET	80	50052	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:09.349546909 CET	80	50052	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:09.349630117 CET	50052	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:09.349677086 CET	50052	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:09.350145102 CET	50053	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:09.354428053 CET	80	50052	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:09.354948044 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:09.355012894 CET	50053	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:09.355093002 CET	50053	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:09.360557079 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.114623070 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.114648104 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.114656925 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.114708900 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.114718914 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.114731073 CET	50053	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:10.114737034 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.114752054 CET	50053	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:10.114757061 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.114768982 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.114778042 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.114782095 CET	50053	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:10.114789009 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.114808083 CET	50053	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:10.114828110 CET	50053	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:10.119590998 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.119601965 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.119673014 CET	50053	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:10.123100996 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.123161077 CET	50053	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:10.123188019 CET	50053	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:10.123538017 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:10.127954006 CET	80	50053	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.128355980 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:10.442635059 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:10.457953930 CET	50054	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:10.462927103 CET	80	50054	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.463011980 CET	50054	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:10.465199947 CET	50054	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:10.470027924 CET	80	50054	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:10.486371040 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:10.612970114 CET	50055	9001	192.168.2.5	190.211.254.101
Nov 3, 2024 09:43:10.618330002 CET	9001	50055	190.211.254.101	192.168.2.5
Nov 3, 2024 09:43:10.618392944 CET	50055	9001	192.168.2.5	190.211.254.101
Nov 3, 2024 09:43:10.619198084 CET	50055	9001	192.168.2.5	190.211.254.101
Nov 3, 2024 09:43:10.624083042 CET	9001	50055	190.211.254.101	192.168.2.5
Nov 3, 2024 09:43:11.246620893 CET	80	50054	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:11.246635914 CET	80	50054	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:11.246711016 CET	50054	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:11.246741056 CET	80	50054	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:11.246819973 CET	80	50054	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:11.246865988 CET	50054	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:11.256063938 CET	80	50054	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:11.256123066 CET	50054	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:11.256150007 CET	50054	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:11.256563902 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:11.261087894 CET	80	50054	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:11.261369944 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:11.600318909 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:11.601211071 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:11.606112003 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:11.687890053 CET	9001	50055	190.211.254.101	192.168.2.5
Nov 3, 2024 09:43:11.689311981 CET	50055	9001	192.168.2.5	190.211.254.101
Nov 3, 2024 09:43:11.694189072 CET	9001	50055	190.211.254.101	192.168.2.5
Nov 3, 2024 09:43:12.170365095 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:12.170382023 CET	9001	50055	190.211.254.101	192.168.2.5
Nov 3, 2024 09:43:12.170797110 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:12.170797110 CET	50055	9001	192.168.2.5	190.211.254.101
Nov 3, 2024 09:43:12.171268940 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:12.171322107 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:12.178370953 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:12.178389072 CET	9001	50055	190.211.254.101	192.168.2.5
Nov 3, 2024 09:43:12.495254040 CET	9001	50055	190.211.254.101	192.168.2.5
Nov 3, 2024 09:43:12.495371103 CET	9001	50055	190.211.254.101	192.168.2.5
Nov 3, 2024 09:43:12.495415926 CET	50055	9001	192.168.2.5	190.211.254.101
Nov 3, 2024 09:43:12.495527983 CET	50055	9001	192.168.2.5	190.211.254.101
Nov 3, 2024 09:43:12.496073961 CET	50056	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:12.498240948 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:12.499187946 CET	50057	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:12.500369072 CET	9001	50055	190.211.254.101	192.168.2.5
Nov 3, 2024 09:43:12.500932932 CET	80	50056	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:12.500998020 CET	50056	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:12.501044989 CET	50056	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:12.504661083 CET	80	50057	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:12.504713058 CET	50057	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:12.504760027 CET	50057	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:12.506531000 CET	80	50056	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:12.510442972 CET	80	50057	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:12.548860073 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:13.548116922 CET	80	50057	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:13.548197031 CET	50057	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:13.548249006 CET	50057	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:13.548754930 CET	50058	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:13.553076029 CET	80	50057	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:13.553579092 CET	80	50058	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:13.553653002 CET	50058	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:13.553731918 CET	50058	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:13.556844950 CET	80	50056	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:13.556911945 CET	50056	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:13.557041883 CET	50056	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:13.558564901 CET	80	50058	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:13.561021090 CET	50059	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:13.562284946 CET	80	50056	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:13.570270061 CET	80	50059	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:13.570338011 CET	50059	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:13.570406914 CET	50059	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:13.576627970 CET	80	50059	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:14.317014933 CET	80	50058	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:14.317032099 CET	80	50058	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:14.317043066 CET	80	50058	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:14.317055941 CET	80	50058	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:14.317092896 CET	50058	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:14.317143917 CET	50058	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:14.326184034 CET	80	50058	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:14.326251984 CET	50058	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:14.326313019 CET	50058	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:14.326683998 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:14.331152916 CET	80	50058	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:14.331459999 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:14.344588995 CET	80	50059	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:14.344727993 CET	50059	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:14.344768047 CET	50059	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:14.345279932 CET	50060	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:14.349634886 CET	80	50059	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:14.350181103 CET	80	50060	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:14.350263119 CET	50060	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:14.353432894 CET	50060	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:14.358261108 CET	80	50060	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:14.680922031 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:14.681541920 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:14.686342001 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:15.034746885 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:15.035017967 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:15.040121078 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:15.113327026 CET	80	50060	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:15.113425970 CET	50060	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:15.113466024 CET	50060	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:15.113975048 CET	50055	9001	192.168.2.5	190.211.254.101
Nov 3, 2024 09:43:15.114007950 CET	50055	9001	192.168.2.5	190.211.254.101
Nov 3, 2024 09:43:15.114557981 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:15.118730068 CET	80	50060	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:15.119669914 CET	9001	50055	190.211.254.101	192.168.2.5
Nov 3, 2024 09:43:15.119682074 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:15.119765043 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:15.119879961 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:15.120578051 CET	9001	50055	190.211.254.101	192.168.2.5
Nov 3, 2024 09:43:15.120628119 CET	50055	9001	192.168.2.5	190.211.254.101
Nov 3, 2024 09:43:15.124804974 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:15.388669014 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:15.439538002 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:15.556334019 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:15.556550026 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:15.561501980 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:15.561691999 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:15.566800117 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:15.883409977 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:15.884392977 CET	50062	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:15.889224052 CET	80	50062	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:15.889295101 CET	50062	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:15.889350891 CET	50062	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:15.894134998 CET	80	50062	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:15.923870087 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:16.248356104 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:16.249831915 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:16.254812002 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:16.579912901 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:16.580322027 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:16.585191011 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:16.920754910 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:16.920831919 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:16.920891047 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:16.921032906 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:16.921500921 CET	50063	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:16.925827026 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:16.926280022 CET	80	50063	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:16.926352978 CET	50063	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:16.926409960 CET	50063	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:16.931188107 CET	80	50063	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:16.951165915 CET	80	50062	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:16.951179028 CET	80	50062	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:16.951189041 CET	80	50062	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:16.951234102 CET	50062	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:17.002027035 CET	50062	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:17.106976032 CET	80	50062	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:17.107091904 CET	50062	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:17.107150078 CET	50062	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:17.107522011 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:17.112015009 CET	80	50062	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:17.112333059 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:17.981718063 CET	80	50063	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:17.981801033 CET	50063	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:17.981848001 CET	50063	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:17.982348919 CET	50064	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:17.986804962 CET	80	50063	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:17.987133980 CET	80	50064	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:17.987205029 CET	50064	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:17.987257004 CET	50064	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:17.991997004 CET	80	50064	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:18.190052986 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:18.190726995 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:18.195497036 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:18.541995049 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:18.542274952 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:18.547092915 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:18.892780066 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:18.893033981 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:18.897867918 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:18.897938013 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:18.902687073 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:19.026276112 CET	80	50064	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:19.026288986 CET	80	50064	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:19.026295900 CET	80	50064	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:19.026422024 CET	80	50064	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:19.026427984 CET	80	50064	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:19.026434898 CET	80	50064	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:19.026539087 CET	50064	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:19.171607971 CET	80	50064	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:19.171701908 CET	50064	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:19.171750069 CET	50064	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:19.172142029 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:19.176640034 CET	80	50064	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:19.177176952 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:19.219515085 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:19.220640898 CET	50065	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:19.225600958 CET	80	50065	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:19.225672960 CET	50065	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:19.225728035 CET	50065	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:19.230593920 CET	80	50065	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:19.267631054 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:19.513016939 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:19.514348030 CET	50066	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:19.519337893 CET	80	50066	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:19.519428968 CET	50066	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:19.519484997 CET	50066	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:19.524353027 CET	80	50066	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:19.564524889 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:20.278104067 CET	80	50065	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:20.278196096 CET	50065	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:20.278283119 CET	50065	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:20.278786898 CET	50067	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:20.283145905 CET	80	50065	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:20.283632040 CET	80	50067	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:20.283691883 CET	50067	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:20.283778906 CET	50067	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:20.288497925 CET	80	50067	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:20.586374044 CET	80	50066	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:20.586452961 CET	50066	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:20.586508036 CET	50066	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:20.587001085 CET	50068	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:20.591456890 CET	80	50066	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:20.591957092 CET	80	50068	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:20.592040062 CET	50068	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:20.592099905 CET	50068	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:20.596941948 CET	80	50068	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:21.347050905 CET	80	50067	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:21.347184896 CET	50067	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:21.347256899 CET	50067	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:21.347786903 CET	50069	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:21.352087975 CET	80	50067	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:21.352627039 CET	80	50069	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:21.352701902 CET	50069	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:21.352770090 CET	50069	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:21.357614994 CET	80	50069	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:21.365951061 CET	80	50068	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:21.365968943 CET	80	50068	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:21.365981102 CET	80	50068	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:21.366012096 CET	80	50068	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:21.366020918 CET	50068	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:21.366024017 CET	80	50068	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:21.366034985 CET	80	50068	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:21.366046906 CET	80	50068	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:21.366059065 CET	50068	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:21.366075039 CET	50068	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:21.366533041 CET	80	50068	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:21.366586924 CET	50068	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:21.366621971 CET	50068	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:21.366982937 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:21.367419958 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:21.367908001 CET	50070	9002	192.168.2.5	192.42.116.218
Nov 3, 2024 09:43:21.371370077 CET	80	50068	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:21.371851921 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:21.372572899 CET	9400	50061	45.141.215.21	192.168.2.5
Nov 3, 2024 09:43:21.372628927 CET	50061	9400	192.168.2.5	45.141.215.21
Nov 3, 2024 09:43:21.372713089 CET	9002	50070	192.42.116.218	192.168.2.5
Nov 3, 2024 09:43:21.372809887 CET	50070	9002	192.168.2.5	192.42.116.218
Nov 3, 2024 09:43:21.372972965 CET	50070	9002	192.168.2.5	192.42.116.218
Nov 3, 2024 09:43:21.377896070 CET	9002	50070	192.42.116.218	192.168.2.5
Nov 3, 2024 09:43:22.410044909 CET	80	50069	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:22.410113096 CET	50069	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:22.410545111 CET	50069	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:22.410664082 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:22.415520906 CET	80	50069	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:22.415553093 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:22.415601969 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:22.420540094 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:22.427695036 CET	9002	50070	192.42.116.218	192.168.2.5
Nov 3, 2024 09:43:22.436029911 CET	50070	9002	192.168.2.5	192.42.116.218
Nov 3, 2024 09:43:22.440907001 CET	9002	50070	192.42.116.218	192.168.2.5
Nov 3, 2024 09:43:22.742789030 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:22.745450020 CET	9002	50070	192.42.116.218	192.168.2.5
Nov 3, 2024 09:43:22.747921944 CET	50070	9002	192.168.2.5	192.42.116.218
Nov 3, 2024 09:43:22.752835035 CET	9002	50070	192.42.116.218	192.168.2.5
Nov 3, 2024 09:43:22.757227898 CET	50071	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:22.762208939 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:22.762275934 CET	50071	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:22.762387991 CET	50071	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:22.767172098 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:22.783257008 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:23.056674957 CET	9002	50070	192.42.116.218	192.168.2.5
Nov 3, 2024 09:43:23.056711912 CET	9002	50070	192.42.116.218	192.168.2.5
Nov 3, 2024 09:43:23.056813002 CET	50070	9002	192.168.2.5	192.42.116.218
Nov 3, 2024 09:43:23.056952953 CET	50070	9002	192.168.2.5	192.42.116.218
Nov 3, 2024 09:43:23.057468891 CET	50072	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:23.061677933 CET	9002	50070	192.42.116.218	192.168.2.5
Nov 3, 2024 09:43:23.062271118 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:23.062351942 CET	50072	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:23.062405109 CET	50072	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:23.067269087 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:23.537225962 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.537358999 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.537389040 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.537400961 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.537410021 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.537411928 CET	50071	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:23.537420988 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.537432909 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.537441015 CET	50071	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:23.537448883 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.537461042 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.537461042 CET	50071	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:23.537472963 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.537491083 CET	50071	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:23.537518978 CET	50071	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:23.542360067 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.542376995 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.542414904 CET	50071	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:23.547075987 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.547168016 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.547238111 CET	50071	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:23.547270060 CET	50071	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:23.547499895 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:23.552407026 CET	80	50071	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:23.552417040 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:23.552481890 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:23.557328939 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:23.879364967 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:23.880414009 CET	50073	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:23.885272026 CET	80	50073	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:23.885344982 CET	50073	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:23.885390043 CET	50073	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:23.890188932 CET	80	50073	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:23.923888922 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:24.114865065 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.114900112 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.114913940 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.114924908 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.114936113 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.114945889 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.114959955 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.114970922 CET	50072	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:24.114975929 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.114989996 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.115001917 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.115036964 CET	50072	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:24.115056992 CET	50072	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:24.119961023 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.120004892 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.120068073 CET	50072	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:24.268603086 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.268688917 CET	50072	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:24.268724918 CET	50072	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:24.269133091 CET	50070	9002	192.168.2.5	192.42.116.218
Nov 3, 2024 09:43:24.269171000 CET	50070	9002	192.168.2.5	192.42.116.218
Nov 3, 2024 09:43:24.273653984 CET	80	50072	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:24.273932934 CET	9002	50070	192.42.116.218	192.168.2.5
Nov 3, 2024 09:43:24.274494886 CET	9002	50070	192.42.116.218	192.168.2.5
Nov 3, 2024 09:43:24.274544001 CET	50070	9002	192.168.2.5	192.42.116.218
Nov 3, 2024 09:43:24.942651033 CET	80	50073	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:24.942676067 CET	80	50073	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:24.942691088 CET	80	50073	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:24.942703962 CET	80	50073	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:24.942717075 CET	80	50073	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:24.942732096 CET	50073	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:24.942781925 CET	50073	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:25.096004963 CET	80	50073	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:25.096250057 CET	50073	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:25.143762112 CET	50073	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:25.144174099 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:25.148775101 CET	80	50073	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:25.148958921 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:25.498136044 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:25.499197960 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:25.504199982 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:25.847758055 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:25.851938963 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:25.856836081 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:26.208097935 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:26.208306074 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:26.213167906 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:26.213241100 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:26.218049049 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:26.535851002 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:26.536886930 CET	50074	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:26.541757107 CET	80	50074	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:26.541856050 CET	50074	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:26.541907072 CET	50074	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:26.546734095 CET	80	50074	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:26.580117941 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:27.680221081 CET	80	50074	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:27.680318117 CET	50074	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:27.681935072 CET	50074	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:27.682463884 CET	50075	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:27.687103987 CET	80	50074	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:27.687474966 CET	80	50075	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:27.687551975 CET	50075	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:27.687597036 CET	50075	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:27.692615986 CET	80	50075	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:28.453267097 CET	80	50075	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:28.453341961 CET	50075	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:28.456449986 CET	50075	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:28.460194111 CET	50076	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:28.461364031 CET	80	50075	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:28.465058088 CET	80	50076	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:28.465136051 CET	50076	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:28.465504885 CET	50076	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:28.470432043 CET	80	50076	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:29.232922077 CET	80	50076	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:29.233114004 CET	50076	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:29.233179092 CET	50076	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:29.233289957 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:29.233613968 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:29.237957001 CET	80	50076	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:29.238013029 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:29.238399982 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:29.238739014 CET	9100	50051	57.128.220.185	192.168.2.5
Nov 3, 2024 09:43:29.238790989 CET	50051	9100	192.168.2.5	57.128.220.185
Nov 3, 2024 09:43:31.190314054 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:31.195185900 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:31.195290089 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:31.195437908 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:31.200262070 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:32.311625957 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:32.313168049 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:32.318051100 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:32.642649889 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:32.643070936 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:32.647957087 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:32.969906092 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:32.969921112 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:32.970057964 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:32.970201015 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:32.970741034 CET	50078	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:32.974973917 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:32.975574970 CET	80	50078	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:32.975644112 CET	50078	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:32.975701094 CET	50078	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:32.980505943 CET	80	50078	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:34.028251886 CET	80	50078	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:34.028321981 CET	50078	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:34.028372049 CET	50078	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:34.028857946 CET	50079	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:34.033157110 CET	80	50078	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:34.033750057 CET	80	50079	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:34.033816099 CET	50079	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:34.033886909 CET	50079	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:34.038641930 CET	80	50079	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:35.544544935 CET	80	50079	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:35.544572115 CET	80	50079	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:35.544584036 CET	80	50079	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:35.544595003 CET	80	50079	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:35.544608116 CET	80	50079	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:35.544616938 CET	80	50079	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:35.544630051 CET	80	50079	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:35.544663906 CET	50079	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:35.544730902 CET	50079	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:35.696855068 CET	80	50079	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:35.697002888 CET	50079	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:35.697002888 CET	50079	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:35.697359085 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:35.701894045 CET	80	50079	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:35.702132940 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:36.039199114 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:36.040357113 CET	50080	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:36.045229912 CET	80	50080	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:36.045327902 CET	50080	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:36.045378923 CET	50080	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:36.050146103 CET	80	50080	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:36.080209017 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:36.818121910 CET	80	50080	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:36.818140984 CET	80	50080	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:36.818150997 CET	80	50080	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:36.818219900 CET	50080	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:36.827410936 CET	80	50080	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:36.827471018 CET	50080	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:36.827519894 CET	50080	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:36.827888966 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:36.832425117 CET	80	50080	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:36.832665920 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:37.180697918 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:37.181571960 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:37.186466932 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:37.544820070 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:37.545213938 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:37.550162077 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:37.884970903 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:37.885806084 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:37.890836000 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:38.235958099 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:38.236592054 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:38.241369963 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:38.593846083 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:38.594073057 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:38.598953009 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:38.970630884 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:38.970890045 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:38.975884914 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:38.975954056 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:38.980813026 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:39.298877001 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:39.303020000 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:39.307857990 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:39.654329062 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:39.656091928 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:39.661160946 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:40.013506889 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:40.013822079 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:40.018695116 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:40.403920889 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:40.404256105 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:40.409343004 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:40.409410954 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:40.414237022 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:40.725178957 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:40.728331089 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:40.733197927 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:41.143127918 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:41.143846035 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:41.148735046 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:41.566509008 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:41.566756964 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:41.571630001 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:41.991743088 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:41.992000103 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:41.997348070 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:41.997411013 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:42.002911091 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:42.314047098 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:42.320338011 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:42.325447083 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:42.325512886 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:42.330332994 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:42.646775961 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:42.647496939 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:42.652376890 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:42.652425051 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:42.657246113 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:42.971210957 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:42.972107887 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:42.977765083 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:43.350343943 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:43.351087093 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:43.356062889 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:43.704050064 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:43.704319000 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:43.709248066 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:44.083110094 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:44.083349943 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:44.083689928 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:44.088280916 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:44.088504076 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:44.089070082 CET	4443	50077	95.214.53.96	192.168.2.5
Nov 3, 2024 09:43:44.089122057 CET	50077	4443	192.168.2.5	95.214.53.96
Nov 3, 2024 09:43:54.284267902 CET	50081	10015	192.168.2.5	185.220.101.155
Nov 3, 2024 09:43:54.289314032 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:54.289413929 CET	50081	10015	192.168.2.5	185.220.101.155
Nov 3, 2024 09:43:54.289575100 CET	50081	10015	192.168.2.5	185.220.101.155
Nov 3, 2024 09:43:54.294306040 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:55.350743055 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:55.352325916 CET	50081	10015	192.168.2.5	185.220.101.155
Nov 3, 2024 09:43:55.357207060 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:55.659162045 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:55.659707069 CET	50081	10015	192.168.2.5	185.220.101.155
Nov 3, 2024 09:43:55.664566040 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:55.966790915 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:55.967323065 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:55.967382908 CET	50081	10015	192.168.2.5	185.220.101.155
Nov 3, 2024 09:43:56.004764080 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:56.004960060 CET	50081	10015	192.168.2.5	185.220.101.155
Nov 3, 2024 09:43:56.005440950 CET	50082	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:56.010440111 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:56.010585070 CET	80	50082	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:56.010653019 CET	50082	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:56.010694981 CET	50082	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:56.016072035 CET	80	50082	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:56.784054995 CET	80	50082	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:56.784146070 CET	50082	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:56.784195900 CET	50082	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:43:56.784723997 CET	50083	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:56.789048910 CET	80	50082	216.218.219.41	192.168.2.5
Nov 3, 2024 09:43:56.789520979 CET	80	50083	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:56.789630890 CET	50083	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:56.789664030 CET	50083	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:56.794548988 CET	80	50083	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:57.823746920 CET	80	50083	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:57.823828936 CET	50083	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:57.823885918 CET	50083	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:57.824385881 CET	50084	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:57.828699112 CET	80	50083	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:57.829171896 CET	80	50084	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:57.829232931 CET	50084	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:57.829313040 CET	50084	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:57.834042072 CET	80	50084	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:58.879822969 CET	80	50084	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:58.879893064 CET	50084	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:58.879929066 CET	50084	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:43:58.880449057 CET	50081	10015	192.168.2.5	185.220.101.155
Nov 3, 2024 09:43:58.880476952 CET	50081	10015	192.168.2.5	185.220.101.155
Nov 3, 2024 09:43:58.881000042 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:43:58.884732962 CET	80	50084	45.66.35.11	192.168.2.5
Nov 3, 2024 09:43:58.885240078 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:58.885682106 CET	10015	50081	185.220.101.155	192.168.2.5
Nov 3, 2024 09:43:58.885731936 CET	50081	10015	192.168.2.5	185.220.101.155
Nov 3, 2024 09:43:58.885795116 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:43:58.885869026 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:43:58.885974884 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:43:58.890688896 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:43:59.239918947 CET	50086	9001	192.168.2.5	71.19.148.104
Nov 3, 2024 09:43:59.244910002 CET	9001	50086	71.19.148.104	192.168.2.5
Nov 3, 2024 09:43:59.244988918 CET	50086	9001	192.168.2.5	71.19.148.104
Nov 3, 2024 09:43:59.245523930 CET	50086	9001	192.168.2.5	71.19.148.104
Nov 3, 2024 09:43:59.250320911 CET	9001	50086	71.19.148.104	192.168.2.5
Nov 3, 2024 09:43:59.633251905 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:43:59.634654999 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:43:59.639425039 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:43:59.788463116 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:43:59.788862944 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:43:59.793637037 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:43:59.942519903 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:43:59.942661047 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:43:59.942717075 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:43:59.942790985 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:43:59.943234921 CET	50087	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:59.947853088 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:43:59.948086023 CET	80	50087	193.23.244.244	192.168.2.5
Nov 3, 2024 09:43:59.948157072 CET	50087	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:59.948199034 CET	50087	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:43:59.953074932 CET	80	50087	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:00.005115986 CET	9001	50086	71.19.148.104	192.168.2.5
Nov 3, 2024 09:44:00.006452084 CET	50086	9001	192.168.2.5	71.19.148.104
Nov 3, 2024 09:44:00.011281967 CET	9001	50086	71.19.148.104	192.168.2.5
Nov 3, 2024 09:44:00.168982029 CET	9001	50086	71.19.148.104	192.168.2.5
Nov 3, 2024 09:44:00.169373989 CET	50086	9001	192.168.2.5	71.19.148.104
Nov 3, 2024 09:44:00.174577951 CET	9001	50086	71.19.148.104	192.168.2.5
Nov 3, 2024 09:44:00.334494114 CET	9001	50086	71.19.148.104	192.168.2.5
Nov 3, 2024 09:44:00.334507942 CET	9001	50086	71.19.148.104	192.168.2.5
Nov 3, 2024 09:44:00.334583044 CET	50086	9001	192.168.2.5	71.19.148.104
Nov 3, 2024 09:44:00.338090897 CET	50086	9001	192.168.2.5	71.19.148.104
Nov 3, 2024 09:44:00.338675022 CET	50088	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:00.342868090 CET	9001	50086	71.19.148.104	192.168.2.5
Nov 3, 2024 09:44:00.343492031 CET	80	50088	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:00.343568087 CET	50088	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:00.343645096 CET	50088	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:00.348412037 CET	80	50088	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:01.003082037 CET	80	50087	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:01.003324986 CET	80	50087	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:01.003386021 CET	50087	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:01.112271070 CET	80	50088	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:01.112343073 CET	50088	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:01.112392902 CET	50088	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:01.112903118 CET	50089	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:01.117202997 CET	80	50088	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:01.117759943 CET	80	50089	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:01.117839098 CET	50089	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:01.117902040 CET	50089	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:01.123145103 CET	80	50089	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:01.153858900 CET	80	50087	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:01.153970003 CET	50087	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:01.154038906 CET	50087	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:01.154365063 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:01.158854008 CET	80	50087	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:01.159302950 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:01.332520962 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:01.333810091 CET	50090	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:01.338999987 CET	80	50090	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:01.339080095 CET	50090	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:01.339124918 CET	50090	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:01.344623089 CET	80	50090	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:01.377032995 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:01.888586998 CET	80	50089	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:01.888659000 CET	50089	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:01.894119024 CET	50089	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:01.899225950 CET	80	50089	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:01.904536963 CET	50091	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:01.909416914 CET	80	50091	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:01.909492970 CET	50091	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:01.914310932 CET	50091	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:01.919306993 CET	80	50091	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:02.383949995 CET	80	50090	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:02.384088993 CET	80	50090	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:02.384100914 CET	80	50090	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:02.384113073 CET	80	50090	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:02.384130955 CET	80	50090	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:02.384152889 CET	50090	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:02.384212971 CET	50090	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:02.534252882 CET	80	50090	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:02.534363985 CET	50090	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:02.534427881 CET	50090	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:02.534858942 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:02.539307117 CET	80	50090	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:02.539725065 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:02.685035944 CET	80	50091	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:02.685108900 CET	50091	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:02.685152054 CET	50091	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:02.685662031 CET	50086	9001	192.168.2.5	71.19.148.104
Nov 3, 2024 09:44:02.685691118 CET	50086	9001	192.168.2.5	71.19.148.104
Nov 3, 2024 09:44:02.686238050 CET	50092	9001	192.168.2.5	192.53.171.194
Nov 3, 2024 09:44:02.690099001 CET	80	50091	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:02.690474987 CET	9001	50086	71.19.148.104	192.168.2.5
Nov 3, 2024 09:44:02.691107035 CET	9001	50092	192.53.171.194	192.168.2.5
Nov 3, 2024 09:44:02.691169024 CET	50092	9001	192.168.2.5	192.53.171.194
Nov 3, 2024 09:44:02.691319942 CET	50092	9001	192.168.2.5	192.53.171.194
Nov 3, 2024 09:44:02.696084976 CET	9001	50092	192.53.171.194	192.168.2.5
Nov 3, 2024 09:44:02.698817968 CET	9001	50086	71.19.148.104	192.168.2.5
Nov 3, 2024 09:44:02.698880911 CET	50086	9001	192.168.2.5	71.19.148.104
Nov 3, 2024 09:44:02.843753099 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:02.844665051 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:02.849559069 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:03.158782005 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:03.159167051 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:03.164042950 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:03.331942081 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:03.332592964 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:03.337382078 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:03.337455034 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:03.342288971 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:03.504328966 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:03.505245924 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:03.510086060 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:03.513155937 CET	9001	50092	192.53.171.194	192.168.2.5
Nov 3, 2024 09:44:03.514579058 CET	50092	9001	192.168.2.5	192.53.171.194
Nov 3, 2024 09:44:03.519398928 CET	9001	50092	192.53.171.194	192.168.2.5
Nov 3, 2024 09:44:03.702785969 CET	9001	50092	192.53.171.194	192.168.2.5
Nov 3, 2024 09:44:03.703464985 CET	50092	9001	192.168.2.5	192.53.171.194
Nov 3, 2024 09:44:03.708368063 CET	9001	50092	192.53.171.194	192.168.2.5
Nov 3, 2024 09:44:03.826865911 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:03.827517033 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:03.832354069 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:03.891843081 CET	9001	50092	192.53.171.194	192.168.2.5
Nov 3, 2024 09:44:03.891911983 CET	9001	50092	192.53.171.194	192.168.2.5
Nov 3, 2024 09:44:03.892041922 CET	50092	9001	192.168.2.5	192.53.171.194
Nov 3, 2024 09:44:03.892345905 CET	50092	9001	192.168.2.5	192.53.171.194
Nov 3, 2024 09:44:03.892996073 CET	50093	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:03.897109032 CET	9001	50092	192.53.171.194	192.168.2.5
Nov 3, 2024 09:44:03.897806883 CET	80	50093	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:03.897871017 CET	50093	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:03.897962093 CET	50093	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:03.902760029 CET	80	50093	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:04.143143892 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:04.143400908 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:04.148189068 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:04.471195936 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:04.471425056 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:04.476239920 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:04.476293087 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:04.481157064 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:04.633164883 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:04.634000063 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:04.638813972 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:04.851619005 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:04.852284908 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:04.857100010 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:04.935950994 CET	80	50093	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:04.936052084 CET	50093	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:04.936100960 CET	50093	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:04.936629057 CET	50094	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:04.941168070 CET	80	50093	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:04.941402912 CET	80	50094	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:04.941472054 CET	50094	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:04.941520929 CET	50094	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:04.946434975 CET	80	50094	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:05.070156097 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:05.070374966 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:05.075277090 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:05.291441917 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:05.291668892 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:05.296583891 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:05.296634912 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:05.301572084 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:05.451889992 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:05.452467918 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:05.457536936 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:05.457602978 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:05.462481022 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:05.613810062 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:05.614634037 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:05.619604111 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:05.714054108 CET	80	50094	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:05.714127064 CET	50094	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:05.714170933 CET	50094	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:05.714606047 CET	50095	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:05.719142914 CET	80	50094	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:05.719585896 CET	80	50095	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:05.719686031 CET	50095	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:05.719818115 CET	50095	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:05.724622965 CET	80	50095	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:05.915283918 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:05.915925980 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:05.920809031 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:06.216161013 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:06.216464996 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:06.221342087 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:06.521286964 CET	80	50095	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:06.522217989 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:06.522304058 CET	50095	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:06.522336006 CET	50095	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:06.522794962 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:06.523170948 CET	50092	9001	192.168.2.5	192.53.171.194
Nov 3, 2024 09:44:06.523202896 CET	50092	9001	192.168.2.5	192.53.171.194
Nov 3, 2024 09:44:06.527183056 CET	80	50095	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:06.527569056 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:06.527643919 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:06.527942896 CET	9001	50092	192.53.171.194	192.168.2.5
Nov 3, 2024 09:44:06.528376102 CET	9001	50092	192.53.171.194	192.168.2.5
Nov 3, 2024 09:44:06.528435946 CET	50092	9001	192.168.2.5	192.53.171.194
Nov 3, 2024 09:44:06.529644012 CET	50096	9001	192.168.2.5	159.69.212.6
Nov 3, 2024 09:44:06.532550097 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:06.534533978 CET	9001	50096	159.69.212.6	192.168.2.5
Nov 3, 2024 09:44:06.535698891 CET	50096	9001	192.168.2.5	159.69.212.6
Nov 3, 2024 09:44:06.535950899 CET	50096	9001	192.168.2.5	159.69.212.6
Nov 3, 2024 09:44:06.540725946 CET	9001	50096	159.69.212.6	192.168.2.5
Nov 3, 2024 09:44:06.682152987 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:06.682729006 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:06.682986021 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:06.687602997 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:06.687769890 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:06.688124895 CET	9002	50085	104.254.128.202	192.168.2.5
Nov 3, 2024 09:44:06.688180923 CET	50085	9002	192.168.2.5	104.254.128.202
Nov 3, 2024 09:44:07.580466986 CET	9001	50096	159.69.212.6	192.168.2.5
Nov 3, 2024 09:44:07.582252979 CET	50096	9001	192.168.2.5	159.69.212.6
Nov 3, 2024 09:44:07.587178946 CET	9001	50096	159.69.212.6	192.168.2.5
Nov 3, 2024 09:44:07.887398958 CET	9001	50096	159.69.212.6	192.168.2.5
Nov 3, 2024 09:44:07.887886047 CET	50096	9001	192.168.2.5	159.69.212.6
Nov 3, 2024 09:44:07.892757893 CET	9001	50096	159.69.212.6	192.168.2.5
Nov 3, 2024 09:44:08.191097021 CET	9001	50096	159.69.212.6	192.168.2.5
Nov 3, 2024 09:44:08.191116095 CET	9001	50096	159.69.212.6	192.168.2.5
Nov 3, 2024 09:44:08.191236019 CET	50096	9001	192.168.2.5	159.69.212.6
Nov 3, 2024 09:44:08.191404104 CET	50096	9001	192.168.2.5	159.69.212.6
Nov 3, 2024 09:44:08.191956997 CET	50097	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:08.196208954 CET	9001	50096	159.69.212.6	192.168.2.5
Nov 3, 2024 09:44:08.196856976 CET	80	50097	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:08.196934938 CET	50097	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:08.197001934 CET	50097	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:08.201869011 CET	80	50097	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:09.253087997 CET	80	50097	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:09.253355980 CET	50097	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:09.253421068 CET	50097	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:44:09.253948927 CET	50098	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:09.258524895 CET	80	50097	45.66.35.11	192.168.2.5
Nov 3, 2024 09:44:09.258951902 CET	80	50098	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:09.259020090 CET	50098	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:09.259073973 CET	50098	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:09.264409065 CET	80	50098	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:10.041485071 CET	80	50098	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:10.041546106 CET	50098	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:10.041591883 CET	50098	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:44:10.042083979 CET	50099	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:10.046529055 CET	80	50098	216.218.219.41	192.168.2.5
Nov 3, 2024 09:44:10.047343969 CET	80	50099	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:10.047414064 CET	50099	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:10.047491074 CET	50099	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:10.052778006 CET	80	50099	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:11.112334967 CET	80	50099	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:11.112420082 CET	50099	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:11.113439083 CET	50099	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:44:11.117201090 CET	50096	9001	192.168.2.5	159.69.212.6
Nov 3, 2024 09:44:11.117233992 CET	50096	9001	192.168.2.5	159.69.212.6
Nov 3, 2024 09:44:11.118274927 CET	80	50099	193.23.244.244	192.168.2.5
Nov 3, 2024 09:44:11.122163057 CET	9001	50096	159.69.212.6	192.168.2.5
Nov 3, 2024 09:44:11.123162985 CET	9001	50096	159.69.212.6	192.168.2.5
Nov 3, 2024 09:44:11.123215914 CET	50096	9001	192.168.2.5	159.69.212.6
Nov 3, 2024 09:44:11.124070883 CET	50100	443	192.168.2.5	202.61.204.198
Nov 3, 2024 09:44:11.124114990 CET	443	50100	202.61.204.198	192.168.2.5
Nov 3, 2024 09:44:11.124186993 CET	50100	443	192.168.2.5	202.61.204.198
Nov 3, 2024 09:44:11.127566099 CET	50100	443	192.168.2.5	202.61.204.198
Nov 3, 2024 09:44:11.127583027 CET	443	50100	202.61.204.198	192.168.2.5
Nov 3, 2024 09:44:12.509815931 CET	443	50100	202.61.204.198	192.168.2.5
Nov 3, 2024 09:44:12.509932995 CET	50100	443	192.168.2.5	202.61.204.198
Nov 3, 2024 09:44:12.513186932 CET	50100	443	192.168.2.5	202.61.204.198
Nov 3, 2024 09:44:12.513195992 CET	443	50100	202.61.204.198	192.168.2.5
Nov 3, 2024 09:44:12.513533115 CET	443	50100	202.61.204.198	192.168.2.5
Nov 3, 2024 09:44:12.514184952 CET	50100	443	192.168.2.5	202.61.204.198
Nov 3, 2024 09:44:12.559340000 CET	443	50100	202.61.204.198	192.168.2.5
Nov 3, 2024 09:44:14.108494043 CET	50101	443	192.168.2.5	162.247.74.216
Nov 3, 2024 09:44:14.108545065 CET	443	50101	162.247.74.216	192.168.2.5
Nov 3, 2024 09:44:14.108618975 CET	50101	443	192.168.2.5	162.247.74.216
Nov 3, 2024 09:44:14.108825922 CET	50101	443	192.168.2.5	162.247.74.216
Nov 3, 2024 09:44:14.108841896 CET	443	50101	162.247.74.216	192.168.2.5
Nov 3, 2024 09:44:15.223092079 CET	443	50101	162.247.74.216	192.168.2.5
Nov 3, 2024 09:44:15.223207951 CET	50101	443	192.168.2.5	162.247.74.216
Nov 3, 2024 09:44:15.224853992 CET	50101	443	192.168.2.5	162.247.74.216
Nov 3, 2024 09:44:15.224863052 CET	443	50101	162.247.74.216	192.168.2.5
Nov 3, 2024 09:44:15.225068092 CET	443	50101	162.247.74.216	192.168.2.5
Nov 3, 2024 09:44:15.225497961 CET	50101	443	192.168.2.5	162.247.74.216
Nov 3, 2024 09:44:15.267370939 CET	443	50101	162.247.74.216	192.168.2.5

HTTP Request Dependency Graph

193.23.244.244

216.218.219.41

45.66.35.11

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:30.149296045 CET	271	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:31.212903976 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:31 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Sun, 03 Nov 2024 09:00:00 GMT Vary: X-Or-Diff-From-Consensus Data Raw: 6e 65 74 77 6f 72 6b 2d 73 74 61 74 75 73 2d 76 65 72 73 69 6f 6e 20 33 0a 76 6f 74 65 2d 73 74 61 74 75 73 20 63 6f 6e 73 65 6e 73 75 73 0a 63 6f 6e 73 65 6e 73 75 73 2d 6d 65 74 68 6f 64 20 33 33 0a 76 61 6c 69 64 2d 61 66 74 65 72 20 32 30 32 34 2d 31 31 2d 30 33 20 30 38 3a 30 30 3a 30 30 0a 66 72 65 73 68 2d 75 6e 74 69 6c 20 32 30 32 34 2d 31 31 2d 30 33 20 30 39 3a 30 30 3a 30 30 0a 76 61 6c 69 64 2d 75 6e 74 69 6c 20 32 30 32 34 2d 31 31 2d 30 33 20 31 31 3a 30 30 3a 30 30 0a 76 6f 74 69 6e 67 2d 64 65 6c 61 79 20 33 30 30 20 33 30 30 0a 63 6c 69 65 6e 74 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 38 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 38 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 38 2e 33 2d 72 63 2c 30 2e 34 2e 38 2e 34 2c 30 2e 34 2e 38 2e 35 2c 30 2e 34 2e 38 2e 36 2c 30 2e 34 2e 38 2e 37 2c 30 2e 34 2e 38 2e 38 2c 30 2e 34 2e 38 2e 39 2c 30 2e 34 2e 38 2e 31 30 2c 30 2e 34 2e 38 2e 31 31 2c 30 2e 34 2e 38 2e 31 32 2c 30 2e 34 2e 38 2e 31 33 0a 73 65 72 76 65 72 2d 76 65 72 73 69 6f 6e 73 [TRUNCATED] Data Ascii: network-status-version 3vote-status consensusconsensus-method 33valid-after 2024-11-03 08:00:00fresh-until 2024-11-03 09:00:00valid-until 2024-11-03 11:00:00voting-delay 300 300client-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13server-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Validrecommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2params AuthDirMa [TRUNCATED]
Nov 3, 2024 09:41:31.212925911 CET	1236	IN	Data Raw: 50 65 72 41 64 64 72 3d 38 20 43 69 72 63 75 69 74 50 72 69 6f 72 69 74 79 48 61 6c 66 6c 69 66 65 4d 73 65 63 3d 33 30 30 30 30 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 42 75 72 73 74 3d 36 30 20 44 6f 53 43 69 72 63 75 69 74 43 Data Ascii: PerAddr=8 CircuitPriorityHalflifeMsec=30000 DoSCircuitCreationBurst=60 DoSCircuitCreationEnabled=1 DoSCircuitCreationMinConnections=2 DoSCircuitCreationRate=2 DoSConnectionEnabled=1 DoSConnectionMaxConcurrentCount=50 DoSRefuseSingleHopClientRe
Nov 3, 2024 09:41:31.212939024 CET	424	IN	Data Raw: 0a 63 6f 6e 74 61 63 74 20 41 6e 64 72 65 61 73 20 4c 65 68 6e 65 72 0a 76 6f 74 65 2d 64 69 67 65 73 74 20 39 35 45 42 30 38 46 31 46 43 38 46 39 33 38 38 31 37 38 46 33 43 35 46 32 36 32 44 44 32 44 36 46 44 36 35 37 46 36 43 0a 64 69 72 2d 73 Data Ascii: contact Andreas Lehnervote-digest 95EB08F1FC8F9388178F3C5F262DD2D6FD657F6Cdir-source longclaw 23D15D965BC35114467363C165C4F724B64B4F66 199.58.81.140 199.58.81.140 80 443contact Riseup Networks <collective at riseup dot net> - 1nNzekuHGGzBY
Nov 3, 2024 09:41:31.212974072 CET	1236	IN	Data Raw: 66 61 6e 69 20 3c 6e 6f 63 61 74 20 61 74 20 72 65 61 64 74 68 65 66 69 6e 65 6d 61 6e 75 61 6c 20 64 6f 74 20 6e 65 74 3e 20 34 30 39 36 2f 46 34 42 38 36 33 41 44 36 36 34 32 45 37 45 45 0a 76 6f 74 65 2d 64 69 67 65 73 74 20 38 42 41 41 31 32 Data Ascii: fani <nocat at readthefinemanual dot net> 4096/F4B863AD6642E7EEvote-digest 8BAA1225B21D51FECEF732F8A1B7031C67BCDCA6dir-source tor26 2F3DF9CA0E5D36F2685A2DA67184EB8DCB8CBA8C 217.196.147.77 217.196.147.77 80 443contact Peter Palfradervote-di
Nov 3, 2024 09:41:31.212985039 CET	1236	IN	Data Raw: 32 38 30 32 35 33 44 46 33 30 33 44 30 46 32 46 30 35 44 44 46 0a 64 69 72 2d 73 6f 75 72 63 65 20 6d 6f 72 69 61 31 20 46 35 33 33 43 38 31 43 45 46 30 42 43 30 32 36 37 38 35 37 43 39 39 42 32 46 34 37 31 41 44 46 32 34 39 46 41 32 33 32 20 31 Data Ascii: 280253DF303D0F2F05DDFdir-source moria1 F533C81CEF0BC0267857C99B2F471ADF249FA232 128.31.0.39 128.31.0.39 9231 9201contact 1024D/EB5A896A28988BF5 arma mit eduvote-digest CDF55B5DF1314B255BC698778A56484D488E90EEr seele AAoQ1DAR6kkoo19hBAX5K0Q
Nov 3, 2024 09:41:31.212996960 CET	1236	IN	Data Raw: 30 30 2c 31 31 33 37 31 2c 31 39 32 39 34 2c 31 39 36 33 38 2c 35 30 30 30 32 2c 36 34 37 33 38 0a 72 20 53 69 6c 65 6e 74 57 68 69 73 70 65 72 20 41 42 43 5a 30 69 41 4e 39 4e 62 37 47 4c 30 7a 61 65 50 6e 75 42 50 65 35 78 30 20 32 34 6d 43 79 Data Ascii: 00,11371,19294,19638,50002,64738r SilentWhisper ABCZ0iAN9Nb7GL0zaePnuBPe5x0 24mCyfELU3DWsOwpPImvl4WdQj0 2024-11-02 22:28:41 154.213.184.44 9001 0a [2a12:dd47:8513::11]:9001s Exit Fast Guard HSDir Running Stable V2Dir Validv Tor 0.4.8.12pr
Nov 3, 2024 09:41:31.213007927 CET	1236	IN	Data Raw: 34 37 33 38 0a 72 20 43 61 6c 79 78 49 6e 73 74 69 74 75 74 65 31 34 20 41 42 47 39 4a 49 57 74 52 64 6d 45 37 45 46 5a 79 49 2f 41 5a 75 58 6a 4d 41 34 20 6d 39 47 2b 63 72 75 4c 53 6d 6b 34 45 30 50 63 32 77 6a 43 6c 4a 36 78 4a 4d 59 20 32 30 Data Ascii: 4738r CalyxInstitute14 ABG9JIWtRdmE7EFZyI/AZuXjMA4 m9G+cruLSmk4E0Pc2wjClJ6xJMY 2024-11-02 21:38:06 162.247.74.201 443 0s Exit Fast Guard HSDir Running Stable V2Dir Validv Tor 0.4.8.11pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 H
Nov 3, 2024 09:41:31.213020086 CET	1236	IN	Data Raw: 2e 31 32 0a 70 72 20 43 6f 6e 66 6c 75 78 3d 31 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 Data Ascii: .12pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=11000p reject 1-65535r DELETE AByNX7Om8lMXHH3kSmjKidQPiw8 yqs8UZTrx75lDcIRn2oQqudLS
Nov 3, 2024 09:41:31.213031054 CET	1236	IN	Data Raw: 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 37 31 30 30 0a 70 20 61 63 63 65 70 74 20 35 33 2c 38 30 2c 34 34 33 2c 38 35 33 0a 72 20 53 74 61 72 41 70 70 73 4d 6f 62 6c 65 79 20 41 43 67 37 56 57 54 6a 42 79 33 4e 32 72 4d 64 62 76 59 Data Ascii: y=1-4w Bandwidth=7100p accept 53,80,443,853r StarAppsMobley ACg7VWTjBy3N2rMdbvYi3Um/Uk8 LwmLBBvA4LUFQk8OHjlXI8WWxyM 2024-11-03 04:06:12 195.15.242.99 9001 0a [2001:1600:10:100::201]:9001s Fast Guard Running Stable V2Dir Validv Tor 0.4.8.
Nov 3, 2024 09:41:31.213042974 CET	1236	IN	Data Raw: 32 34 2d 31 31 2d 30 33 20 30 31 3a 30 33 3a 32 39 20 38 34 2e 31 34 34 2e 31 37 39 2e 31 36 36 20 34 34 33 20 30 0a 73 20 46 61 73 74 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 32 44 69 72 20 56 61 6c 69 64 0a 76 20 54 6f 72 20 30 2e 34 Data Ascii: 24-11-03 01:03:29 84.144.179.166 443 0s Fast Running Stable V2Dir Validv Tor 0.4.8.13pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=1
Nov 3, 2024 09:41:31.217935085 CET	1236	IN	Data Raw: 63 3a 32 30 33 3a 31 39 32 3a 34 32 3a 31 31 36 3a 31 38 35 5d 3a 39 30 30 34 0a 73 20 45 78 69 74 20 46 61 73 74 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 61 6c 69 64 0a 76 20 54 6f 72 20 30 2e 34 2e 38 2e 31 32 0a 70 72 20 43 6f 6e 66 Data Ascii: c:203:192:42:116:185]:9004s Exit Fast Running Stable Validv Tor 0.4.8.12pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=25000p accept

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49706	216.218.219.41	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:35.711494923 CET	292	OUT	GET /tor/server/fp/32d29da53a7d8b03fd7894018a011ef8a155c8c1 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49707	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:36.494187117 CET	292	OUT	GET /tor/server/fp/32d29da53a7d8b03fd7894018a011ef8a155c8c1 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49708	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:37.556854010 CET	292	OUT	GET /tor/server/fp/32d29da53a7d8b03fd7894018a011ef8a155c8c1 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49711	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:40.345527887 CET	292	OUT	GET /tor/server/fp/453d69bb809fc59ed0cad5d8399c27bc06deb424 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49712	193.23.244.244	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:40.457539082 CET	292	OUT	GET /tor/server/fp/29fc814416a16e0ade79d03651bb80734dd16fb6 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49713	216.218.219.41	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:41.410945892 CET	292	OUT	GET /tor/server/fp/453d69bb809fc59ed0cad5d8399c27bc06deb424 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49714	216.218.219.41	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:41.531651974 CET	292	OUT	GET /tor/server/fp/29fc814416a16e0ade79d03651bb80734dd16fb6 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49715	216.218.219.41	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:42.205537081 CET	292	OUT	GET /tor/server/fp/453d69bb809fc59ed0cad5d8399c27bc06deb424 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49716	193.23.244.244	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:42.308130026 CET	292	OUT	GET /tor/server/fp/29fc814416a16e0ade79d03651bb80734dd16fb6 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49719	193.23.244.244	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:44.456919909 CET	292	OUT	GET /tor/server/fp/5d95800b6875192f7ca94383a47450b34b291e08 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49720	45.66.35.11	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:44.644193888 CET	289	OUT	GET /tor/server/fp/d3dfb8f9a878f44ed80e2b34f794fdf6334fc5f9 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:45.694231033 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:45 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:45 GMT Data Raw: 72 6f 75 74 65 72 20 43 43 43 53 74 75 74 74 67 61 72 74 42 65 72 20 31 38 35 2e 32 32 30 2e 31 30 31 2e 37 32 20 39 31 30 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 64 79 41 5a 36 72 53 6f 32 61 44 62 79 47 73 44 56 5a 32 75 63 52 71 64 66 35 5a 45 46 54 6d 32 33 50 68 6e 59 62 4e 44 51 6f 43 79 47 59 41 51 41 67 42 41 43 44 41 53 37 69 0a 54 66 2b 47 6b 56 6f 38 57 67 2b 2b 68 7a 6e 50 46 73 65 61 66 4c 56 7a 42 47 70 56 7a 2f 36 59 4e 41 6d 67 64 45 6d 6a 45 4a 6e 73 68 6b 55 31 38 4f 6a 64 51 52 6a 65 49 44 75 6f 31 53 42 6b 0a 78 42 58 5a 62 75 34 72 70 45 6f 6f 59 71 52 4a 57 59 72 75 44 6e 36 59 39 73 42 6c 44 7a 39 41 59 4c 6f 70 30 6c 52 39 74 46 53 4d 6a 73 66 43 6c 4d 64 4a 52 70 65 57 77 51 4d 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 67 77 45 75 34 6b 33 2f [TRUNCATED] Data Ascii: router CCCStuttgartBer 185.220.101.72 9100 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1dyAZ6rSo2aDbyGsDVZ2ucRqdf5ZEFTm23PhnYbNDQoCyGYAQAgBACDAS7iTf+GkVo8Wg++hznPFseafLVzBGpVz/6YNAmgdEmjEJnshkU18OjdQRjeIDuo1SBkxBXZbu4rpEooYqRJWYruDn6Y9sBlDz9AYLop0lR9tFSMjsfClMdJRpeWwQM=-----END ED25519 CERT-----master-key-ed25519 gwEu4k3/hpFaPFoPvoc5zxbHmny1cwRqVc/+mDQJoHQor-address [2a0b:f4c2:3::72]:9100platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 19:44:54fingerprint D3DF B8F9 A878 F44E D80E 2B34 F794 FDF6 334F C5F9uptime 3740576bandwidth 1073741824 1073741824 26056586extra-info-digest 60179EAAB37E6609E131FE5A8F7A7511A25F8E93 2auBvwrOWfnbnBDzjBmPQfaYWukrgYhfyAp6LOsRzT8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOKt1UT4DUOVyONqQZOxfo/f7KwukWz7OQsIk5U5dHMOMa7DXOKENzeuQTtIwv9fbgcStHIZa0zSbBji+8fAhA85zWn1hsghls44ATtLE20RcwjqJR+eHpD1Lm4ylx [TRUNCATED]
Nov 3, 2024 09:41:45.694252014 CET	764	IN	Data Raw: 4a 6d 5a 36 38 72 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d Data Ascii: JmZ68rAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK4hXGyI+vpy5KqJssyhLGkGMBNiYEt9Io/k/7voy3Nd8bfY06QJeo49U1vMfGjMnXpABn/0cH4oKL8C9sqFFWtXtdag6PuyCSFL51Ujf8ySdNupuSG20geZ5LzAULu0/A+GBFi2EpYKzOs1t2
Nov 3, 2024 09:41:45.694263935 CET	1236	IN	Data Raw: 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 30 33 37 46 46 32 33 42 37 44 30 39 41 36 30 34 34 41 41 33 30 42 30 41 45 41 31 33 34 46 46 45 42 43 39 41 32 33 31 41 20 24 30 41 37 37 38 43 38 33 46 42 39 42 45 30 37 38 31 45 Data Ascii: 519 CERT-----family $037FF23B7D09A6044AA30B0AEA134FFEBC9A231A $0A778C83FB9BE0781E05E9DAA0360CEF43F8E15A $116E8D8CBC15916FB38A0C4C00A870A960C2CE03 $16AC44F46A340FF41B18440B68601D6C33DE230D $2070E51315036FEB76FC2E0B03A320724234A9A4 $218C0695509
Nov 3, 2024 09:41:45.694268942 CET	1236	IN	Data Raw: 39 32 20 24 37 30 34 30 31 46 46 44 33 32 34 33 46 34 44 42 37 35 36 35 43 31 38 44 41 45 46 42 32 35 32 42 39 44 39 44 32 31 45 35 20 24 37 34 35 31 45 32 42 35 36 46 44 39 34 33 46 41 38 32 37 41 46 38 35 38 33 33 36 34 36 45 36 38 44 46 43 34 Data Ascii: 92 $70401FFD3243F4DB7565C18DAEFB252B9D9D21E5 $7451E2B56FD943FA827AF85833646E68DFC4FFD3 $74A9614A581D66FA1BEC0C902980CA70B39EBA60 $74E698D2CED303464D1A3ACBAD855735523BE328 $7916A965E564B3C7EDFAEABC880B7ED4A3225CF9 $7F42AB6F55891982ED92121C63171
Nov 3, 2024 09:41:45.694281101 CET	1236	IN	Data Raw: 30 33 34 35 30 45 44 31 45 35 34 36 39 38 30 32 32 34 45 43 34 46 43 42 33 44 20 24 45 45 36 44 43 35 31 32 32 45 43 38 31 31 41 39 34 43 34 32 33 43 42 43 42 44 45 45 33 31 31 37 41 33 36 42 31 43 37 41 20 24 45 46 33 38 30 46 36 45 36 44 35 37 Data Ascii: 03450ED1E546980224EC4FCB3D $EE6DC5122EC811A94C423CBCBDEE3117A36B1C7A $EF380F6E6D57BBAC9FCD1E03BBBEC6DAF3747A2E $F0F764E70D996668832387CE7C2238608A00293C $F526CD4FDDB9C871D96A5F78153BD16CFCB9109B $F9F1F7AAB75C865EE4E3E05A0DA0A804436F5B41hidden
Nov 3, 2024 09:41:45.694293022 CET	1142	IN	Data Raw: 63 63 65 70 74 20 2a 3a 34 36 34 33 0a 61 63 63 65 70 74 20 2a 3a 35 30 35 30 0a 61 63 63 65 70 74 20 2a 3a 35 31 39 30 0a 61 63 63 65 70 74 20 2a 3a 35 32 32 32 2d 35 32 32 33 0a 61 63 63 65 70 74 20 2a 3a 35 32 32 38 0a 61 63 63 65 70 74 20 2a Data Ascii: ccept :4643accept :5050accept :5190accept :5222-5223accept :5228accept :5900accept :6660-6669accept :6679accept :6697accept :8000accept :8008accept :8074accept :8080accept :8082accept :8087-8088accept :8332-8333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49721	193.23.244.244	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:45.539418936 CET	292	OUT	GET /tor/server/fp/5d95800b6875192f7ca94383a47450b34b291e08 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49722	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:46.156578064 CET	292	OUT	GET /tor/server/fp/68f09fe1cd22572d38980184d848ba456302c826 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49723	216.218.219.41	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:46.607928038 CET	292	OUT	GET /tor/server/fp/5d95800b6875192f7ca94383a47450b34b291e08 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:47.382375956 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:47 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:47 GMT Data Raw: 72 6f 75 74 65 72 20 76 32 73 69 6c 69 63 6f 6e 76 61 6c 6c 65 79 20 31 34 33 2e 31 31 30 2e 31 35 36 2e 31 37 36 20 36 35 35 33 35 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 65 71 41 62 69 79 6c 43 69 79 37 72 4e 4b 50 73 65 73 62 77 41 58 6a 44 43 65 68 72 2b 41 69 72 48 6e 6e 37 35 59 53 47 46 52 33 72 75 2f 41 51 41 67 42 41 44 44 59 34 51 53 0a 6d 6c 66 30 71 46 72 67 77 4d 51 63 6b 38 2b 42 72 41 2b 66 58 75 6a 36 64 72 31 4a 74 67 52 6a 39 71 6a 45 36 32 53 67 45 37 70 51 4f 58 66 51 4e 55 73 38 4f 71 6f 6a 68 32 45 41 38 6d 45 53 0a 50 72 62 4a 44 32 4d 71 38 34 56 67 6e 39 4d 55 73 38 56 56 66 2f 78 6e 37 4b 53 4b 33 51 31 62 49 55 30 59 54 36 47 39 43 6b 4e 65 50 6d 41 62 77 77 56 5a 47 39 46 4b 64 51 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 77 32 4f 45 45 70 [TRUNCATED] Data Ascii: router v2siliconvalley 143.110.156.176 65535 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1eqAbiylCiy7rNKPsesbwAXjDCehr+AirHnn75YSGFR3ru/AQAgBADDY4QSmlf0qFrgwMQck8+BrA+fXuj6dr1JtgRj9qjE62SgE7pQOXfQNUs8Oqojh2EA8mESPrbJD2Mq84Vgn9MUs8VVf/xn7KSK3Q1bIU0YT6G9CkNePmAbwwVZG9FKdQE=-----END ED25519 CERT-----master-key-ed25519 w2OEEppX9Kha4MDEHJPPgawPn17o+na9SbYEY/aoxOsplatform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 16:52:26fingerprint 5D95 800B 6875 192F 7CA9 4383 A474 50B3 4B29 1E08uptime 129672bandwidth 3276800 6553600 1770496extra-info-digest C0027803D89B546E315E854A0A636A17714CCCD2 X9fOHwnFW2sCLcxiMJBuyg9hKqFlCNzBWrhJ+2a8gYwonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL988y1Pn5MteIdkwotlNA4SAsxsvJWGg/f3vdsrj8Rv8p9fibw2xvuR8jV6NhGZNyeqYsc2ltfEaEqveIMKEfdgH7sAwlCr4AzthfIk14JikHExsxu4dKBOV5vuvW81K1LmUHFjr0S3tyjuo8YG34iykcZLWh7uzUSETI [TRUNCATED]
Nov 3, 2024 09:41:47.382388115 CET	764	IN	Data Raw: 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 2f 30 6a 61 6a 75 62 6d 74 70 6a 6d 76 57 34 49 4b 67 78 6b 4f 70 63 75 35 Data Ascii: ---signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK/0jajubmtpjmvW4IKgxkOpcu5Nks7z+QYcIP+DLX/odQfznVs/AQWjqE77cZhCGFrca2UJVbDvTiwhCm4m99ulkauSUZQlRTR2uxCQLGz+fVSZf2Xu4FHkFyisX9pyeKu87gKVSolPdnUY270XIyTb+g2lD+WuD0y8tw1jMaqlAgMBAAE=-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49725	45.66.35.11	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:47.227125883 CET	289	OUT	GET /tor/server/fp/68f09fe1cd22572d38980184d848ba456302c826 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:48.284531116 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:48 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:48 GMT Data Raw: 72 6f 75 74 65 72 20 41 72 61 6d 69 73 20 31 38 35 2e 32 34 31 2e 32 30 38 2e 32 30 32 20 39 37 30 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 47 41 5a 72 63 72 58 2b 75 73 2b 45 4b 57 67 36 57 5a 69 75 45 6f 41 66 73 2f 59 79 79 6f 2b 62 56 79 70 4e 37 70 4b 47 39 46 71 55 37 41 51 41 67 42 41 43 70 68 79 6f 4b 0a 76 6b 63 6d 78 74 62 6e 6c 59 50 70 2b 33 4a 46 50 53 41 46 4d 66 79 53 37 30 6e 4e 5a 68 77 44 58 64 71 64 36 71 2b 51 37 78 72 7a 53 6b 51 77 31 63 56 47 44 58 52 36 44 4f 76 45 2f 67 5a 69 0a 34 48 66 6d 41 37 73 53 33 37 42 50 71 4b 78 52 7a 33 73 43 73 6c 33 42 77 41 6b 65 5a 57 6c 55 4a 46 73 4b 50 45 7a 4a 41 73 2f 6d 77 78 51 31 42 48 61 4a 79 49 5a 4f 4a 51 55 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 71 59 63 71 43 72 35 48 4a 73 62 57 35 35 57 44 [TRUNCATED] Data Ascii: router Aramis 185.241.208.202 9700 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oGAZrcrX+us+EKWg6WZiuEoAfs/Yyyo+bVypN7pKG9FqU7AQAgBACphyoKvkcmxtbnlYPp+3JFPSAFMfyS70nNZhwDXdqd6q+Q7xrzSkQw1cVGDXR6DOvE/gZi4HfmA7sS37BPqKxRz3sCsl3BwAkeZWlUJFsKPEzJAs/mwxQ1BHaJyIZOJQU=-----END ED25519 CERT-----master-key-ed25519 qYcqCr5HJsbW55WD6ftyRT0gBTH8ku9JzWYcA13aneoor-address [2a12:a800:2:1:185:241:208:202]:9700platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 00:08:03fingerprint 68F0 9FE1 CD22 572D 3898 0184 D848 BA45 6302 C826uptime 64820bandwidth 1073741824 1073741824 8415232extra-info-digest 1A2CB9FD81DB539D80859E5548B9134A6BBEFC43 VM7tUVK8SoD/Q/Ww0rVNv8WRmKBLPDeVEW9ujmVf/WIonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOpuiBwGtBog4Ucx0rz8wgmVjftuV4yQwyu2NlXy6+gamkIT5Oyg8Da3/239vqNuGZf/hkK1JLlswSvGG27gpySlyADmv/cfKMVnZOmzARBLZJO0CwU14MrVDeP [TRUNCATED]
Nov 3, 2024 09:41:48.284619093 CET	212	IN	Data Raw: 6d 61 6b 35 7a 4d 47 73 72 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b Data Ascii: mak5zMGsrAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOuMaB6lAonkUkheBH0gTCPtwk5/j3a/eF/ZpUObeGxza+IiNICwALw2prOje+hYygKpSoLSFP0axadcRRhbck/1Tc0Mg44lLAwL6c1XMPTdr3Pcu
Nov 3, 2024 09:41:48.284630060 CET	1236	IN	Data Raw: 45 78 65 54 6f 75 62 0a 45 6e 67 34 45 4d 5a 7a 71 62 42 33 59 4f 70 4a 32 74 46 31 39 35 79 6c 4b 66 33 66 32 79 4e 39 62 4c 76 77 53 73 57 49 75 38 58 79 6b 76 48 6a 77 67 41 58 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 Data Ascii: ExeToubEng4EMZzqbB3YOpJ2tF195ylKf3f2yN9bLvwSsWIu8XykvHjwgAXAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----nu1GxDIRCQIXjTIAKsDElstHJDZ8M6fHzKkJYpVqBmyotlaR13DSPdcvSAHEw5eXzbXNq/OPgPhc0FmmrkfFKHoipWUg4H8ohF
Nov 3, 2024 09:41:48.284641027 CET	1236	IN	Data Raw: 45 31 32 30 37 45 42 38 41 46 34 20 24 34 46 39 45 46 43 46 37 36 38 39 30 38 34 45 34 43 38 45 45 39 39 33 45 31 32 33 45 33 32 42 37 35 33 36 38 38 30 34 43 20 24 35 45 37 32 46 44 39 30 42 41 32 30 43 36 45 39 46 31 32 30 36 33 32 43 32 36 45 Data Ascii: E1207EB8AF4 $4F9EFCF7689084E4C8EE993E123E32B75368804C $5E72FD90BA20C6E9F120632C26EE72D58A8E0879 $5ECD28C3476E6B3BFFC68E3AB9F2DAFBE3238A95 $62C6E6E50670985089E82FCE16ED841A0728FC3F $64163502DFDE9A8BCA73B525170F484DFA703727 $673ABF8132785E24CE48
Nov 3, 2024 09:41:48.284656048 CET	1236	IN	Data Raw: 46 36 41 34 30 35 45 37 33 30 44 45 30 37 45 43 37 34 43 43 46 30 36 32 33 44 39 35 46 30 44 33 41 34 45 20 24 43 35 32 38 42 32 32 44 34 42 41 32 32 30 36 33 39 46 39 44 43 45 38 36 41 35 30 42 42 39 38 42 44 44 32 46 43 46 42 39 20 24 43 45 30 Data Ascii: F6A405E730DE07EC74CCF0623D95F0D3A4E $C528B22D4BA220639F9DCE86A50BB98BDD2FCFB9 $CE0E8EE797257C9F2EB195528CC152FBCF4F2959 $CFF9C18036D401579C473177C0D95B463AD371F7 $D25E49EF7FD775352084AC86AF030F8DE9036359 $D3F6616034448DEEE369782C96F84FE1407E42
Nov 3, 2024 09:41:48.284667969 CET	1236	IN	Data Raw: 70 74 20 2a 3a 38 37 33 0a 61 63 63 65 70 74 20 2a 3a 39 30 32 2d 39 30 34 0a 61 63 63 65 70 74 20 2a 3a 39 38 31 0a 61 63 63 65 70 74 20 2a 3a 39 38 39 2d 39 39 35 0a 61 63 63 65 70 74 20 2a 3a 31 31 39 34 0a 61 63 63 65 70 74 20 2a 3a 31 32 32 Data Ascii: pt :873accept :902-904accept :981accept :989-995accept :1194accept :1220accept :1293accept :1500accept :1533accept :1677accept :1723accept :1755accept :1863accept :2082accept :2083accept :2086-2087accept *:2095-
Nov 3, 2024 09:41:48.284678936 CET	216	IN	Data Raw: 4e 20 53 49 47 4e 41 54 55 52 45 2d 2d 2d 2d 2d 0a 34 38 4c 42 79 34 32 52 6c 42 57 63 6d 6f 51 61 56 62 6f 42 74 52 30 76 35 73 76 2f 33 72 6c 4e 67 6d 6d 39 6b 74 44 64 57 45 53 54 4a 6d 35 63 6e 57 2b 44 58 50 2f 4b 76 6a 6a 33 4b 33 62 45 0a Data Ascii: N SIGNATURE-----48LBy42RlBWcmoQaVboBtR0v5sv/3rlNgmm9ktDdWESTJm5cnW+DXP/Kvjj3K3bE9UmCFW4N4gNh2s06JXeKwKMEJzntcJjksii6Yqx47nluawJr78MKRDREQVJPII/HBsAS6fLFgQUut3roo4LNzlnKuM52Z95X79axWj1nv8M=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49731	216.218.219.41	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:49.443335056 CET	292	OUT	GET /tor/server/fp/15450640183d6488afefa8b50ee8e91f64afe9ab HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:50.213671923 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:50 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:50 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 34 35 2e 31 34 31 2e 32 31 35 2e 34 30 20 31 31 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 58 68 7a 42 6b 56 6d 62 67 63 4f 63 63 4f 35 52 37 4b 65 73 2f 42 65 6b 73 44 74 68 30 73 32 30 49 45 56 58 38 4f 50 38 43 70 31 41 51 41 67 42 41 44 4c 76 46 59 54 0a 4b 4e 4c 54 49 6f 38 31 75 4c 6b 74 44 58 39 54 30 5a 30 32 77 36 2f 68 7a 67 77 44 2f 4f 4c 4b 45 53 65 32 48 76 48 53 34 38 73 33 74 51 62 74 71 69 78 7a 31 78 38 4f 76 35 35 6e 75 41 39 35 0a 61 76 32 67 2f 58 54 73 6b 4c 47 78 4f 68 58 30 38 63 52 5a 50 7a 4b 31 39 49 35 6c 61 48 6f 68 47 72 6a 48 63 57 55 41 37 37 30 63 51 2b 45 31 46 76 68 32 39 30 2b 51 6f 51 6f 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 79 37 78 57 45 79 6a 53 30 79 4b 50 4e [TRUNCATED] Data Ascii: router Quetzalcoatl 45.141.215.40 110 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAXhzBkVmbgcOccO5R7Kes/BeksDth0s20IEVX8OP8Cp1AQAgBADLvFYTKNLTIo81uLktDX9T0Z02w6/hzgwD/OLKESe2HvHS48s3tQbtqixz1x8Ov55nuA95av2g/XTskLGxOhX08cRZPzK19I5laHohGrjHcWUA770cQ+E1Fvh290+QoQo=-----END ED25519 CERT-----master-key-ed25519 y7xWEyjS0yKPNbi5LQ1/U9GdNsOv4c4MA/ziyhEnth4or-address [2a12:a800:2:1:45:141:215:40]:110platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:35:27fingerprint 1545 0640 183D 6488 AFEF A8B5 0EE8 E91F 64AF E9ABuptime 324041bandwidth 1073741824 1073741824 7327564extra-info-digest 9A0F3784099FB64C5815621F3E7F412646874C54 hOjOczTnmZCgrdjGw3kPrIhkcKQAM1cG/PrIbBcmym0onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMOSbTx8oKCcyUM/vCESAnlBzmpA9lk5L18SEBTsxOexReWu+/OsJ3rJWLxT9O5VFt8DoIcRt+fkkpDMTOWzBYxpTFGrBY4Rm7Bi0rhRLSv57s//7T0bKk5Qgx [TRUNCATED]
Nov 3, 2024 09:41:50.213706017 CET	1236	IN	Data Raw: 5a 6c 32 32 75 70 30 65 77 64 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 Data Ascii: Zl22up0ewdAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM0K9PM+a52QjkyJ0KSoQ8BVJcfE1Y7Zwi87FckGbFKvsqz2iJhPcJbp8Ra6NeNIkp/C+rzOTksN0BSpFMX0Bk9RnVjD/YXYnu/zOj61Aj3xv8MA9rfWke5Le1pfzLjtBX3JezOQqwhKZo
Nov 3, 2024 09:41:50.213716984 CET	424	IN	Data Raw: 30 33 33 41 32 32 38 32 37 45 33 43 34 36 20 24 30 41 37 36 43 30 41 30 41 37 32 31 44 44 42 43 33 32 34 42 37 30 35 41 44 42 46 43 39 35 46 44 38 30 36 41 45 38 35 35 20 24 30 41 46 39 38 32 43 43 37 31 41 30 31 44 39 35 45 38 39 35 39 44 37 36 Data Ascii: 033A22827E3C46 $0A76C0A0A721DDBC324B705ADBFC95FD806AE855 $0AF982CC71A01D95E8959D763D0EC0E5A6C61244 $0B5BC76B3BE7553B229FD3E73F26AED41C31DD19 $0B8EF5F5016926F4245350FB37914E30BF36C528 $0CD666F9C9A40A8CFB1E6B9465597A51D3A1CBF8 $0CF48696F004482C4
Nov 3, 2024 09:41:50.213731050 CET	1236	IN	Data Raw: 36 45 45 33 35 33 32 35 34 31 20 24 31 32 37 45 38 30 33 38 38 38 44 38 32 46 33 33 43 43 33 43 33 31 31 45 43 43 36 43 43 45 42 37 37 30 38 38 33 31 43 42 20 24 31 33 30 43 46 43 46 33 38 42 41 33 33 32 37 45 33 30 30 31 41 31 44 42 32 41 34 42 Data Ascii: 6EE3532541 $127E803888D82F33CC3C311ECC6CCEB7708831CB $130CFCF38BA3327E3001A1DB2A4B5ACBDAE248D9 $13CADC9E09F30AF24A98B44E88323DB655A803E9 $13FBC97516DC854399E70BC7CA9A4513FFD4F08C $140E4FC6202FE17F46337058FC9848FA9055482B $149E584199DAD5966FADA
Nov 3, 2024 09:41:50.213742971 CET	1236	IN	Data Raw: 33 36 38 42 46 34 45 36 35 45 39 45 42 32 43 43 45 34 33 44 31 33 32 45 45 37 46 41 41 46 33 30 39 33 20 24 32 45 42 38 39 37 35 37 46 31 44 38 32 32 38 37 38 34 33 33 35 32 33 32 45 32 43 45 32 39 38 39 44 32 32 30 45 35 39 30 20 24 32 45 43 35 Data Ascii: 368BF4E65E9EB2CCE43D132EE7FAAF3093 $2EB89757F1D8228784335232E2CE2989D220E590 $2EC5EE348BD8D9D2E518B2CAEA9C671E2D5F77A6 $2EF3F194E34705F9E13021BAC7B394653329243A $2EFC2B8BC724CF435C14066087936BE7CA3C57A3 $30C472441D910A8BCDA571F2637C80119E76D08
Nov 3, 2024 09:41:50.213789940 CET	1236	IN	Data Raw: 41 46 43 41 43 42 38 33 39 35 42 33 37 34 31 31 20 24 33 45 46 41 37 42 30 32 35 39 36 39 31 36 43 41 37 46 46 35 39 43 37 41 33 41 37 41 38 41 38 44 35 36 42 37 41 31 45 38 20 24 33 46 33 38 43 31 37 43 31 31 42 34 33 35 36 32 37 36 36 42 35 30 Data Ascii: AFCACB8395B37411 $3EFA7B02596916CA7FF59C7A3A7A8A8D56B7A1E8 $3F38C17C11B43562766B50A95366B021CBCC7ADA $3F6E66FDA54B0CED35F01A16AF5D034DDDD8D48C $409BD5AEC15BF5D2B983C6F064D852B0ADE0C8BD $410C2D96F0749813FDBBB15D079FC03BAEF6BFD1 $42708A12892506E
Nov 3, 2024 09:41:50.213802099 CET	1188	IN	Data Raw: 35 34 36 36 32 39 39 33 36 35 31 38 32 31 34 44 43 46 43 46 37 38 34 45 38 37 35 44 30 45 42 45 35 32 45 30 35 35 32 44 20 24 35 34 36 38 37 44 35 39 46 38 43 38 44 39 30 30 35 36 43 41 39 34 38 34 39 39 37 30 42 33 36 32 44 41 33 38 35 44 41 44 Data Ascii: 546629936518214DCFCF784E875D0EBE52E0552D $54687D59F8C8D90056CA94849970B362DA385DAD $552C2E2AFDD1B740A38CA9768C51EC011B2AF701 $555A6B7CB3D8ECA376B4CB6701596A7B211E21D3 $56D878C942CD38F5287079974950668B18ECC4CD $5756D9C403D89B79AFE69D50BB0682BA3
Nov 3, 2024 09:41:50.213813066 CET	1236	IN	Data Raw: 34 36 35 32 42 34 46 37 32 37 39 34 30 45 36 46 36 33 32 45 30 31 35 30 32 33 44 44 20 24 36 32 35 30 30 41 42 34 30 31 46 39 33 35 35 38 36 37 37 43 31 45 38 43 36 31 45 37 32 34 42 44 34 36 36 43 45 38 41 30 20 24 36 34 36 42 34 45 33 39 42 34 Data Ascii: 4652B4F727940E6F632E015023DD $62500AB401F93558677C1E8C61E724BD466CE8A0 $646B4E39B49F303B4B552A8F3CBB8FCD40BE7EB5 $64D90959E50D593D80ACD0E29A2BE9051EB66EEA $656BA6C00B21DB086611171C946288A29E2DF5BC $659B0645A1C264D9D8FF4C9DD2B08ADAC392D475 $65A
Nov 3, 2024 09:41:50.213824034 CET	212	IN	Data Raw: 30 32 39 43 36 45 43 35 32 44 20 24 37 35 41 44 44 38 32 46 41 34 34 43 38 45 37 44 37 36 34 31 34 31 34 38 43 46 45 35 45 31 31 33 31 43 44 32 41 44 30 44 20 24 37 36 34 34 42 35 37 44 44 38 36 33 30 35 46 33 42 38 31 37 32 46 45 46 36 43 45 45 Data Ascii: 029C6EC52D $75ADD82FA44C8E7D76414148CFE5E1131CD2AD0D $7644B57DD86305F3B8172FEF6CEE85864D088BA7 $76BACC90CBA71714918554156CAABE955E7A940F $76CA419C68502FFC4D950D167E25EE0AD3A0A764 $77313C32AA48AB658299DA039DF6C627
Nov 3, 2024 09:41:50.213836908 CET	1236	IN	Data Raw: 43 31 32 36 46 35 37 30 20 24 37 37 44 35 33 46 38 43 39 35 34 35 44 31 45 36 41 34 44 33 35 33 32 45 39 45 32 44 38 34 37 34 34 36 30 39 33 33 42 39 20 24 37 39 39 46 33 36 46 33 45 41 44 34 32 33 43 32 33 45 37 36 33 35 31 31 35 34 45 30 42 43 Data Ascii: C126F570 $77D53F8C9545D1E6A4D3532E9E2D8474460933B9 $799F36F3EAD423C23E76351154E0BC98E8B498FE $7B9608D3B65C10061C8546839DD878ADAD91A83D $7BD416652010B7C42202BE40F749A417003ECD2C $7C6686190CE6E8A0A1A5B5B845BF3F14D252D0DF $7C6FDF1CEE7C924EE06C064
Nov 3, 2024 09:41:50.218671083 CET	1236	IN	Data Raw: 41 33 33 46 32 36 33 34 31 36 30 35 44 35 39 46 38 32 44 38 41 44 35 38 46 37 45 41 36 43 43 35 20 24 38 45 45 44 41 33 34 43 45 36 44 36 45 36 30 35 45 44 33 31 37 39 32 37 38 46 34 35 38 38 32 36 35 34 39 32 33 32 38 30 20 24 39 30 38 35 37 45 Data Ascii: A33F26341605D59F82D8AD58F7EA6CC5 $8EEDA34CE6D6E605ED3179278F45882654923280 $90857E0B5912063AF8770D0C244224697C5BD877 $90A83D3A6D53619211909E96EDC30C910676A32B $9112E190D8FD4ED1266399C96537620BF3700E7B $9180840F6BFF235CA7F4A51BEC46075B5A5B1509

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49734	216.218.219.41	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:49.584502935 CET	292	OUT	GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49736	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:50.352857113 CET	292	OUT	GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49737	45.66.35.11	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:50.709748030 CET	289	OUT	GET /tor/server/fp/5b41f18219bc9c3097491cc02a9ae8c9b2d955a4 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49744	45.66.35.11	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:51.421022892 CET	289	OUT	GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49746	45.66.35.11	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:51.745892048 CET	289	OUT	GET /tor/server/fp/5b41f18219bc9c3097491cc02a9ae8c9b2d955a4 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49753	45.66.35.11	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:52.794140100 CET	289	OUT	GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49754	45.66.35.11	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:52.810837030 CET	289	OUT	GET /tor/server/fp/5b41f18219bc9c3097491cc02a9ae8c9b2d955a4 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:53.853035927 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:53 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:53 GMT Data Raw: 72 6f 75 74 65 72 20 72 65 6c 61 79 6f 6e 30 31 34 31 20 31 38 35 2e 32 32 30 2e 31 30 31 2e 31 34 31 20 31 30 31 34 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 63 44 41 66 68 4b 2b 68 63 76 5a 6d 41 58 33 67 43 64 74 59 2b 54 2f 6f 62 34 6d 39 2b 49 67 53 2f 42 4d 2b 2b 64 45 65 61 54 4c 62 2b 6f 41 51 41 67 42 41 44 42 58 55 4a 68 0a 73 79 42 36 76 44 6c 64 30 6d 6c 4c 2f 2f 67 34 42 76 63 42 6d 75 6f 63 42 2b 4c 70 65 79 54 32 37 41 50 6d 70 62 4f 6e 4d 45 72 45 62 56 59 47 53 59 52 67 39 35 68 6c 78 41 73 43 61 6a 51 53 0a 48 61 79 64 32 36 64 6e 4e 2f 46 48 41 73 4f 45 51 79 44 64 71 73 6b 6d 52 46 32 79 4e 78 66 37 2b 32 45 34 57 57 43 75 44 50 71 72 39 79 4a 74 45 67 61 4b 6d 30 73 49 65 41 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 77 56 31 43 59 62 4d 67 65 72 [TRUNCATED] Data Ascii: router relayon0141 185.220.101.141 10141 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1cDAfhK+hcvZmAX3gCdtY+T/ob4m9+IgS/BM++dEeaTLb+oAQAgBADBXUJhsyB6vDld0mlL//g4BvcBmuocB+LpeyT27APmpbOnMErEbVYGSYRg95hlxAsCajQSHayd26dnN/FHAsOEQyDdqskmRF2yNxf7+2E4WWCuDPqr9yJtEgaKm0sIeA4=-----END ED25519 CERT-----master-key-ed25519 wV1CYbMgerw5XdJpS//4OAb3AZrqHAfi6Xsk9uwD5qUor-address [2a0b:f4c2:1::141]:10141platform Tor 0.4.8.8 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 05:58:34fingerprint 5B41 F182 19BC 9C30 9749 1CC0 2A9A E8C9 B2D9 55A4uptime 16859073bandwidth 1073741824 1073741824 16854871extra-info-digest 8425FA7535EF6C74AD85D9E436778ABFA5B324C6 +v3RSPxXscJFW9FU0wiFz4XGwHxg9cj4UYvfFvWa2vkonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOKnAfPwnICtOpLAkvQCWDKoPmrK+KGcJYGYgRG3bK3GcQf58gr1k2AMDsSYqlZTx6ES8Oci+on5+rhTqSMFFrM86Dos8rQ2/oWtA3wwpgbra+yv2ayHcPLICrurzL [TRUNCATED]
Nov 3, 2024 09:41:53.853075027 CET	212	IN	Data Raw: 64 58 35 6c 6f 48 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d Data Ascii: dX5loHAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOxow8CtQPu/IKeAeC/n/Tw0VV7ckVgIdXZSNMAFblm3HdrSoUdJ40t4Eh8fahkHZm3ikKEnnSuuxco8q1+9VTw7uGxPggH8LAMGMc9DR5sbr1P6fHrH
Nov 3, 2024 09:41:53.853086948 CET	1236	IN	Data Raw: 66 51 78 67 0a 56 47 4c 56 44 4c 53 38 54 54 5a 36 61 63 4e 33 44 35 33 5a 4c 53 6d 72 56 32 4a 38 71 54 35 35 48 57 4b 49 66 4f 4b 69 49 6f 75 4f 6f 75 2b 67 45 66 2f 70 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 Data Ascii: fQxgVGLVDLS8TTZ6acN3D53ZLSmrV2J8qT55HWKIfOKiIouOou+gEf/pAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----28NGHySK2iS1oJasbWl19NZrL5uevhFZ/BDbm/bbzvH/bY5MHc5aLTuBA3WPecAsHqfZwj7ip1og05XEmobzI3R578ERpTj9YTSCm
Nov 3, 2024 09:41:53.853113890 CET	35	IN	Data Raw: 37 52 41 50 47 53 4c 6a 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 53 49 47 4e 41 54 55 52 45 2d 2d 2d 2d 2d 0a Data Ascii: 7RAPGSLjE=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49760	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:53.826287031 CET	292	OUT	GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49766	45.66.35.11	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:54.893480062 CET	289	OUT	GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:55.942327976 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:55 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:55 GMT Data Raw: 72 6f 75 74 65 72 20 53 69 6c 65 6e 74 57 68 69 73 70 65 72 20 31 35 34 2e 32 31 33 2e 31 38 34 2e 34 34 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 66 54 41 61 32 4c 38 6b 47 4c 6d 42 45 76 72 73 34 4c 55 6f 4d 37 67 39 4a 67 66 62 4f 6f 7a 62 51 48 79 69 66 52 63 49 49 48 4f 30 63 76 41 51 41 67 42 41 44 34 76 61 74 30 0a 46 30 63 46 55 67 4f 41 45 73 73 48 4b 50 2f 66 62 59 62 51 4e 56 78 68 34 61 31 59 68 78 41 50 6f 70 59 55 76 67 31 42 50 61 72 76 4b 42 36 48 7a 2f 41 4b 74 76 54 35 34 42 4f 48 39 45 78 52 0a 47 38 34 38 36 56 52 51 47 64 4b 48 56 39 55 78 50 4c 46 74 62 4d 63 4e 46 69 50 6e 69 6a 72 33 66 6b 41 38 33 52 73 56 75 6c 75 30 67 52 35 61 6e 6d 6e 37 64 32 30 50 30 67 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 2b 4c 32 72 64 42 64 48 42 56 [TRUNCATED] Data Ascii: router SilentWhisper 154.213.184.44 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1fTAa2L8kGLmBEvrs4LUoM7g9JgfbOozbQHyifRcIIHO0cvAQAgBAD4vat0F0cFUgOAEssHKP/fbYbQNVxh4a1YhxAPopYUvg1BParvKB6Hz/AKtvT54BOH9ExRG8486VRQGdKHV9UxPLFtbMcNFiPnijr3fkA83RsVulu0gR5anmn7d20P0gA=-----END ED25519 CERT-----master-key-ed25519 +L2rdBdHBVIDgBLLByj/322G0DVcYeGtWIcQD6KWFL4or-address [2a12:dd47:8513::11]:9001platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:28:41fingerprint 0010 99D2 200D F4D6 FB18 BD33 69E3 E7B8 13DE E71Duptime 734702bandwidth 1073741824 1073741824 13658488extra-info-digest BA054FD87160538FE9C02761A269A686DF84E470 amm9LP1S+fpYbeKE0GFOmg6gsC5ZyNYxnFbsK6qEkvIonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOgDk/wmDfNhQjUKJTwaeLRE5VC1L6NeRmfSJpQsv4zQM/Mthc9+kLiIf4NhZD/dvaozYo4ro6AgAZ6X211krrCUL0Asah4bZSw+lHMioGQ1coVSCIG0BHwkgLS0g0 [TRUNCATED]
Nov 3, 2024 09:41:55.942342997 CET	1236	IN	Data Raw: 35 4b 6c 59 43 76 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d Data Ascii: 5KlYCvAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANDH5hml+/syWQLLwgz6wJCy5OQ2sWKNuYeN+mffNj5LGxPNlCzcOSscrthzUtb8Vv7FPiF+ULnxAsgXJC2Nw6cixX1TPp1PZZCVbbCBrtdnLYg6UjlaKx1+T9G/8VdNHFERTblY25N1XfH7aN
Nov 3, 2024 09:41:55.942354918 CET	546	IN	Data Raw: 74 20 2a 3a 39 39 33 0a 72 65 6a 65 63 74 20 2a 3a 32 35 32 35 0a 72 65 6a 65 63 74 20 2a 3a 32 37 31 30 0a 72 65 6a 65 63 74 20 2a 3a 35 35 30 30 30 0a 72 65 6a 65 63 74 20 2a 3a 31 33 35 2d 31 33 39 0a 72 65 6a 65 63 74 20 2a 3a 34 34 35 0a 72 Data Ascii: t :993reject :2525reject :2710reject :55000reject :135-139reject :445reject :1214reject :4661-4666reject :6346-6429reject :6699reject :6881-6999accept :*tunnelled-dir-serverrouter-sig-ed25519 8M+i6s09rNc+z7yaFKdbTecB31

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49767	216.218.219.41	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:55.374502897 CET	292	OUT	GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:56.139002085 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:56 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:56 GMT Data Raw: 72 6f 75 74 65 72 20 53 45 4e 44 4e 4f 4f 53 45 70 6c 7a 20 32 30 34 2e 31 33 37 2e 31 34 2e 31 30 36 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 62 30 41 54 72 50 43 71 44 68 6f 58 39 62 70 48 2b 38 48 41 61 51 55 68 68 72 36 5a 79 62 78 2f 67 47 52 30 75 4d 65 75 57 59 52 4d 2b 45 41 51 41 67 42 41 41 53 71 6f 59 67 0a 2b 71 4c 48 71 2b 35 45 51 36 74 65 65 2b 39 59 2f 63 73 63 65 73 65 57 6c 35 50 71 6d 35 48 66 7a 70 34 61 72 35 6f 46 76 77 6e 6a 5a 4c 42 6f 46 49 6f 4d 6b 78 71 65 78 2f 55 67 6c 33 43 5a 0a 55 56 64 77 4f 6f 32 31 6e 51 66 6a 73 44 35 42 65 63 4b 50 37 78 4f 43 73 38 45 6e 58 68 55 33 37 68 63 4e 76 38 6c 79 35 6b 67 4a 36 71 6f 44 78 58 77 51 63 64 47 31 79 51 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 45 71 71 47 49 50 71 69 78 36 76 75 [TRUNCATED] Data Ascii: router SENDNOOSEplz 204.137.14.106 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1b0ATrPCqDhoX9bpH+8HAaQUhhr6Zybx/gGR0uMeuWYRM+EAQAgBAASqoYg+qLHq+5EQ6tee+9Y/csceseWl5Pqm5Hfzp4ar5oFvwnjZLBoFIoMkxqex/Ugl3CZUVdwOo21nQfjsD5BecKP7xOCs8EnXhU37hcNv8ly5kgJ6qoDxXwQcdG1yQ4=-----END ED25519 CERT-----master-key-ed25519 EqqGIPqix6vuREOrXnvvWP3LHHrHlpeT6puR386eGq8platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 03:40:26fingerprint 000F 3EB7 5342 BE37 1F1D 8D3F AE90 890A EB56 64EEuptime 11711004bandwidth 12697600 25395200 14184770extra-info-digest A61DB07C14C53B0851DDB6A9C0F8591FD350560E ZEGxALe6B5mLvrlOw2SJkV4pJK8bFY7okJsyR3Z4BWQonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALQshzjbIodYG7n/zsUlkbJvlXBcZ1wxx9I4aZVgd63eaVg820TYHKdlRv2RK0BJdZFn9dQfsJmGJ8+xCqZ5EFh2JiuBVLFkXRmSasfUFSfuFsnfLXINYkBpoBypquwFHxKMNvGvrkn3Yhd7SZUqp9W/aVtaMikBI2KZO6k [TRUNCATED]
Nov 3, 2024 09:41:56.139163017 CET	1236	IN	Data Raw: 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 6d 78 38 56 56 4b 6f 7a 31 5a 32 39 6c 66 31 4c 70 61 4b 6c 68 61 65 35 72 38 Data Ascii: --signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKmx8VVKoz1Z29lf1LpaKlhae5r8kQixFfSR6wSCVEOpbpUJH2VWNg5ePizzO2PY98md7BIiUHLMLrTzldq9xVxhDZ+RYELc0QlT7fTYwFjWz9hwQqVpah/VtMIKgQ/E8xUDqSTCqx6Xibuc8JRlKDPj4uA+N+65G4ZClc+4BTUnAgMBAAE=-----E
Nov 3, 2024 09:41:56.139203072 CET	1236	IN	Data Raw: 37 32 2e 31 36 2e 30 2e 30 2f 31 32 3a 2a 0a 72 65 6a 65 63 74 20 32 30 34 2e 31 33 37 2e 31 34 2e 31 30 36 3a 2a 0a 61 63 63 65 70 74 20 2a 3a 32 30 2d 32 31 0a 61 63 63 65 70 74 20 2a 3a 32 32 0a 61 63 63 65 70 74 20 2a 3a 32 33 0a 61 63 63 65 Data Ascii: 72.16.0.0/12:reject 204.137.14.106:accept :20-21accept :22accept :23accept :43accept :53accept :79accept :80-81accept :88accept :110accept :143accept :194accept :220accept :389accept :443accept :464accept :46
Nov 3, 2024 09:41:56.139214993 CET	279	IN	Data Raw: 32 38 39 55 30 51 52 53 79 34 56 6c 4f 47 6d 62 46 4e 54 58 54 58 39 46 75 47 46 66 6d 79 31 42 5a 64 44 67 0a 72 6f 75 74 65 72 2d 73 69 67 6e 61 74 75 72 65 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 53 49 47 4e 41 54 55 52 45 2d 2d 2d 2d 2d 0a 67 75 Data Ascii: 289U0QRSy4VlOGmbFNTXTX9FuGFfmy1BZdDgrouter-signature-----BEGIN SIGNATURE-----guaD0TOWrGRuOIEcFTzUnZJu9qPK0SXLD1JVbX51CELFxpjKeRqknBvMxEg2qf1LqUKsy21Hy47llGq4GJcqRrBqlTQJddZFPr/NOOw8rRWHYl4Udp7WL4OTyolhiaQyQksd7qFUSGMBpupy0wCnhuMzzMfP4X8k5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49778	216.218.219.41	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:57.585419893 CET	292	OUT	GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49779	216.218.219.41	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:57.931607962 CET	292	OUT	GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49783	45.66.35.11	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:58.370955944 CET	289	OUT	GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:59.420244932 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:59 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:59 GMT Data Raw: 72 6f 75 74 65 72 20 43 61 6c 79 78 49 6e 73 74 69 74 75 74 65 31 34 20 31 36 32 2e 32 34 37 2e 37 34 2e 32 30 31 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 63 46 41 64 4a 77 74 61 52 76 76 62 52 78 4a 4d 67 79 7a 71 6c 62 66 71 6e 32 70 72 48 67 72 55 43 66 67 4c 62 33 50 32 46 76 42 56 54 35 41 51 41 67 42 41 44 38 42 78 4b 39 0a 55 58 46 6f 67 48 46 6f 48 6b 6a 2f 75 62 42 31 56 73 78 30 2f 6f 6d 4d 4f 77 51 39 55 74 54 6f 65 50 62 5a 72 56 37 50 43 64 77 46 45 65 68 33 55 35 5a 68 56 65 78 76 30 55 35 4b 78 39 4d 64 0a 4d 6a 69 43 77 4d 30 44 56 65 4f 5a 6a 52 59 76 47 56 53 39 6d 6b 65 46 41 67 6e 34 2f 4d 6f 44 53 74 41 6a 4f 63 79 6e 6f 68 68 55 5a 76 30 4b 4d 35 6a 6f 31 41 30 58 44 51 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 2f 41 63 53 76 56 46 78 [TRUNCATED] Data Ascii: router CalyxInstitute14 162.247.74.201 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1cFAdJwtaRvvbRxJMgyzqlbfqn2prHgrUCfgLb3P2FvBVT5AQAgBAD8BxK9UXFogHFoHkj/ubB1Vsx0/omMOwQ9UtToePbZrV7PCdwFEeh3U5ZhVexv0U5Kx9MdMjiCwM0DVeOZjRYvGVS9mkeFAgn4/MoDStAjOcynohhUZv0KM5jo1A0XDQk=-----END ED25519 CERT-----master-key-ed25519 /AcSvVFxaIBxaB5I/7mwdVbMdP6JjDsEPVLU6Hj22a0platform Tor 0.4.8.11 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 21:38:06fingerprint 0011 BD24 85AD 45D9 84EC 4159 C88F C066 E5E3 300Euptime 14400629bandwidth 1073741824 1073741824 12699621extra-info-digest 0F4AA0434F60AD87F09D31098FFF73F0E7D6AA76 3F/luXTeOylojIJoIcKNWfqsj827uYe6C8giWPiBrQkonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMB3MZyFvCuTrMOmsB+jQFR1RUL6+KofY0IaPoL2z0Eyvc3H++IvSnN+X1ypZGgiLYqPSSCzYiEi/du0UawoeiY921CiRxiTCnPEmlXvm0FD+VKMFwlcajvER20yve/7dHOmezbBBpRp2HYCLlFncedYxNOzywb [TRUNCATED]
Nov 3, 2024 09:41:59.420258045 CET	212	IN	Data Raw: 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 67 70 36 2b 67 4e 37 45 62 31 59 75 6e 39 39 77 50 44 Data Ascii: C KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMgp6+gN7Eb1Yun99wPDtSts0mfttMgajuQ7eJmfPEnMK2FBEhUkkOkf96cmI9X3PfqEC8bcdhx6OPLbxfEsz/GLBYJ0GLuOiT+10GAraFwHp+t4Hym0StCRGng6b/oey2wZoSJ3JdOkSUzAYTbV
Nov 3, 2024 09:41:59.420268059 CET	1236	IN	Data Raw: 6e 4e 4a 67 75 6b 73 68 31 49 4b 37 77 72 64 58 4c 32 33 41 58 45 4b 48 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 6f 6e 69 6f 6e 2d 6b 65 79 2d 63 72 6f 73 73 63 65 72 74 0a Data Ascii: nNJguksh1IK7wrdXL23AXEKHAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----hfsvCJXSA/v/UcPkadueJmzul8jyAhSDzuwZi4oeX9Kmp6mlVqzzJkaOB5J0zLvYOazFAT5/6y3sA5qDKIV0YVsp3gIlqDjSI3GcoJDUMNcllsayHv7pI+izk7OZFF63FzRGK
Nov 3, 2024 09:41:59.420279026 CET	1236	IN	Data Raw: 41 31 41 39 35 38 42 37 33 31 32 37 43 42 30 41 44 20 24 45 38 36 36 33 39 32 34 46 45 32 41 41 44 34 45 30 38 31 41 31 37 45 44 36 39 37 36 44 30 41 45 38 30 31 30 46 34 37 42 20 24 45 44 45 44 42 38 37 39 37 38 37 33 44 33 34 30 33 32 38 42 35 Data Ascii: A1A958B73127CB0AD $E8663924FE2AAD4E081A17ED6976D0AE8010F47B $EDEDB8797873D340328B5FEDBD7744A7D1DF151F $F68A76522D356F89BEC286889A3822250567BE2Ehidden-service-dircontact Nicholas Merrill <nick AT calyx dot com> BTC - 14wntQ8cBdnhUVfYmDjXz6Pbp
Nov 3, 2024 09:41:59.420289993 CET	596	IN	Data Raw: 30 0a 61 63 63 65 70 74 20 2a 3a 38 30 38 37 2d 38 30 38 38 0a 61 63 63 65 70 74 20 2a 3a 38 33 33 32 2d 38 33 33 33 0a 61 63 63 65 70 74 20 2a 3a 38 34 34 33 0a 61 63 63 65 70 74 20 2a 3a 38 38 38 38 0a 61 63 63 65 70 74 20 2a 3a 39 34 31 38 0a Data Ascii: 0accept :8087-8088accept :8332-8333accept :8443accept :8888accept :9418accept :9999accept :10000accept :11371accept :12350accept :19294accept :19638accept :23456accept :33033accept :64738reject :tunnelled-dir-se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49786	193.23.244.244	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:58.714037895 CET	292	OUT	GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49792	45.66.35.11	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:59.776515961 CET	289	OUT	GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:01.313540936 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:01 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:01 GMT Data Raw: 72 6f 75 74 65 72 20 53 69 6c 65 6e 74 57 68 69 73 70 65 72 20 31 35 34 2e 32 31 33 2e 31 38 34 2e 34 34 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 66 54 41 61 32 4c 38 6b 47 4c 6d 42 45 76 72 73 34 4c 55 6f 4d 37 67 39 4a 67 66 62 4f 6f 7a 62 51 48 79 69 66 52 63 49 49 48 4f 30 63 76 41 51 41 67 42 41 44 34 76 61 74 30 0a 46 30 63 46 55 67 4f 41 45 73 73 48 4b 50 2f 66 62 59 62 51 4e 56 78 68 34 61 31 59 68 78 41 50 6f 70 59 55 76 67 31 42 50 61 72 76 4b 42 36 48 7a 2f 41 4b 74 76 54 35 34 42 4f 48 39 45 78 52 0a 47 38 34 38 36 56 52 51 47 64 4b 48 56 39 55 78 50 4c 46 74 62 4d 63 4e 46 69 50 6e 69 6a 72 33 66 6b 41 38 33 52 73 56 75 6c 75 30 67 52 35 61 6e 6d 6e 37 64 32 30 50 30 67 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 2b 4c 32 72 64 42 64 48 42 56 [TRUNCATED] Data Ascii: router SilentWhisper 154.213.184.44 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1fTAa2L8kGLmBEvrs4LUoM7g9JgfbOozbQHyifRcIIHO0cvAQAgBAD4vat0F0cFUgOAEssHKP/fbYbQNVxh4a1YhxAPopYUvg1BParvKB6Hz/AKtvT54BOH9ExRG8486VRQGdKHV9UxPLFtbMcNFiPnijr3fkA83RsVulu0gR5anmn7d20P0gA=-----END ED25519 CERT-----master-key-ed25519 +L2rdBdHBVIDgBLLByj/322G0DVcYeGtWIcQD6KWFL4or-address [2a12:dd47:8513::11]:9001platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:28:41fingerprint 0010 99D2 200D F4D6 FB18 BD33 69E3 E7B8 13DE E71Duptime 734702bandwidth 1073741824 1073741824 13658488extra-info-digest BA054FD87160538FE9C02761A269A686DF84E470 amm9LP1S+fpYbeKE0GFOmg6gsC5ZyNYxnFbsK6qEkvIonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOgDk/wmDfNhQjUKJTwaeLRE5VC1L6NeRmfSJpQsv4zQM/Mthc9+kLiIf4NhZD/dvaozYo4ro6AgAZ6X211krrCUL0Asah4bZSw+lHMioGQ1coVSCIG0BHwkgLS0g0 [TRUNCATED]
Nov 3, 2024 09:42:01.313757896 CET	764	IN	Data Raw: 35 4b 6c 59 43 76 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d Data Ascii: 5KlYCvAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANDH5hml+/syWQLLwgz6wJCy5OQ2sWKNuYeN+mffNj5LGxPNlCzcOSscrthzUtb8Vv7FPiF+ULnxAsgXJC2Nw6cixX1TPp1PZZCVbbCBrtdnLYg6UjlaKx1+T9G/8VdNHFERTblY25N1XfH7aN
Nov 3, 2024 09:42:01.313782930 CET	1018	IN	Data Raw: 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 30 30 31 30 39 39 44 32 32 30 30 44 46 34 44 36 46 42 31 38 42 44 33 33 36 39 45 33 45 37 42 38 31 33 44 45 45 37 31 44 20 24 31 42 37 42 41 44 34 45 39 31 42 33 42 35 46 41 32 43 Data Ascii: 519 CERT-----family $001099D2200DF4D6FB18BD3369E3E7B813DEE71D $1B7BAD4E91B3B5FA2C59F9120E0D13E4C7403B93hidden-service-dircontact relays@@@fuppurge dot infontor-onion-key vP2IhxiAdApZLKSoL8y9WlDHir2jO18n9qjWuIS+pGkreject 0.0.0.0/8:*reject

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49801	216.218.219.41	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:01.643145084 CET	292	OUT	GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:02.398400068 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:02 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:02 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 34 35 2e 31 34 31 2e 32 31 35 2e 35 36 20 38 34 33 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 61 59 56 48 44 30 51 71 75 63 6c 6d 58 48 49 76 62 77 6c 64 43 45 49 59 4f 6f 36 59 6c 5a 37 50 7a 74 73 42 35 72 57 6d 30 43 65 41 51 41 67 42 41 42 59 4b 72 38 6d 0a 69 49 64 59 75 76 36 65 58 71 66 79 62 73 79 39 36 68 64 6b 57 69 51 63 37 31 51 68 55 6a 34 61 54 54 35 35 79 6b 78 45 67 66 45 36 38 6e 39 50 64 47 39 58 53 62 6c 35 2b 77 55 2f 49 50 38 43 0a 79 46 63 55 4b 56 46 37 49 6b 7a 41 42 73 6a 32 65 32 52 45 34 37 30 6a 52 6b 4c 36 77 74 63 6b 6b 71 73 58 78 4b 6a 75 39 59 70 44 76 33 63 4b 45 2f 5a 31 54 64 32 48 65 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 57 43 71 2f 4a 6f 69 48 57 4c 72 2b [TRUNCATED] Data Ascii: router Quetzalcoatl 45.141.215.56 8430 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAaYVHD0QquclmXHIvbwldCEIYOo6YlZ7PztsB5rWm0CeAQAgBABYKr8miIdYuv6eXqfybsy96hdkWiQc71QhUj4aTT55ykxEgfE68n9PdG9XSbl5+wU/IP8CyFcUKVF7IkzABsj2e2RE470jRkL6wtckkqsXxKju9YpDv3cKE/Z1Td2Hegg=-----END ED25519 CERT-----master-key-ed25519 WCq/JoiHWLr+nl6n8m7MveoXZFokHO9UIVI+Gk0+ecoor-address [2a12:a800:2:1:45:141:215:56]:8430platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:23:48fingerprint 5A7D E908 3BE6 228A 4339 55A4 649C 9865 C909 676Auptime 324066bandwidth 1073741824 1073741824 7290636extra-info-digest 865236792538F6B57AAE337CF4E02E067C9751FF sRTzbsfqZuyJF2Gvyllzvrxo4gE3M8qWYmDho/a1rO8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM7rdccbDS85i2LeGoAluJvxILf260QWFZvcDJhVdB3wS2JewPwi7rfjDRnTj5XXJc2Gm6PYCxjkByB/glW/IvbrfkQ+Y608Blbq04EEZvXwS1i/ACBgA1Ya [TRUNCATED]
Nov 3, 2024 09:42:02.398437977 CET	764	IN	Data Raw: 48 6d 68 78 5a 5a 4d 75 71 76 51 46 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 Data Ascii: HmhxZZMuqvQFAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL14+tqxvYaTEw9V1DasHGlbNVgSjQUSkOUnZ9sFctWhskzK4lwpminq7l40C3wc0UjDRSPavBd5PLfBg7uu3yEzj3mBX5usFbk5VlshkML/4ZGEleS+6SyFQWMFqyIxTnPtEIg6rfE5
Nov 3, 2024 09:42:02.398457050 CET	1236	IN	Data Raw: 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 30 32 46 43 46 36 32 43 30 41 44 33 41 44 31 44 32 30 38 44 37 46 32 37 45 31 32 45 38 38 34 30 45 46 35 33 43 37 45 30 20 24 30 33 34 36 35 44 32 31 41 32 32 42 Data Ascii: D ED25519 CERT-----family $02FCF62C0AD3AD1D208D7F27E12E8840EF53C7E0 $03465D21A22B24B242301471D5AA11E4E0E0C915 $035F813195F0CB9F567EDFDF60C6745CA36BA0BD $0632EC43FEA8EA3F377FE2E34DA671746F1642DD $0705F969B825FAE29BCEB3F692B0A4224DED82E0 $07DCE
Nov 3, 2024 09:42:02.398529053 CET	1236	IN	Data Raw: 41 36 42 39 38 42 39 42 20 24 31 38 39 43 34 34 44 44 30 36 33 31 32 44 36 44 46 38 46 42 35 37 41 39 34 34 45 36 38 31 39 46 46 32 34 35 37 34 30 43 20 24 31 41 32 34 33 44 41 36 46 36 33 39 41 39 43 39 39 42 34 33 39 31 31 35 38 45 30 45 31 34 Data Ascii: A6B98B9B $189C44DD06312D6DF8FB57A944E6819FF245740C $1A243DA6F639A9C99B4391158E0E14E89C29754C $1A45601A517304EA7C8DC9339A99FE6C65CAA499 $1B6BCBCDB384364B6FB4F3576CA70AECFC083641 $1E3C197C8C922128FF049856E0536FF9CB4E5E8C $1F2F634D6D87CF6C5358C13
Nov 3, 2024 09:42:02.398541927 CET	1236	IN	Data Raw: 45 32 35 42 32 43 37 39 35 34 35 36 30 39 43 43 30 45 35 38 37 36 35 43 44 41 46 46 33 34 39 35 20 24 33 33 35 33 31 31 43 36 30 44 43 42 33 38 41 31 33 37 31 35 38 38 41 37 46 31 32 34 44 46 30 44 32 44 43 32 46 34 35 39 20 24 33 33 44 45 42 46 Data Ascii: E25B2C79545609CC0E58765CDAFF3495 $335311C60DCB38A1371588A7F124DF0D2DC2F459 $33DEBFF96FD95D7D5084026F6C4A55F9EC4A094C $3443ECBD0E1E71179B0F0B98184A48E255FE0E18 $34B80D703F4D6350146B684E66D962A23A830117 $34CA0E8F7838FCC9984C7BAA282884A4F843A423
Nov 3, 2024 09:42:02.398552895 CET	636	IN	Data Raw: 35 35 42 43 31 44 41 39 34 44 33 32 43 46 20 24 34 33 45 46 35 31 34 31 41 34 34 31 37 44 30 42 46 31 42 30 41 42 32 41 44 32 43 33 44 37 34 43 32 32 33 35 35 44 30 41 20 24 34 34 36 37 43 46 38 34 41 34 35 39 39 39 43 43 35 35 33 32 33 32 38 34 Data Ascii: 55BC1DA94D32CF $43EF5141A4417D0BF1B0AB2AD2C3D74C22355D0A $4467CF84A45999CC553232846CB6AA5FEBAC058B $446E16B00D5131DAC9643AB10136B3CD19B1E9B9 $44FA36A839BA35EB15F3EC5CB5FB355238A32ABC $44FF5FFA5F90096198D514412A78C1692DBEB0EA $460D13CE3971BD213
Nov 3, 2024 09:42:02.398585081 CET	1236	IN	Data Raw: 36 32 44 35 32 41 45 43 20 24 35 30 36 42 34 37 33 45 36 37 33 45 33 38 45 41 39 46 45 43 42 37 41 35 41 37 33 44 44 31 45 31 46 43 33 37 42 35 35 35 20 24 35 31 36 39 31 43 37 39 32 36 42 31 33 34 41 42 35 38 32 46 33 34 38 39 44 32 33 41 39 35 Data Ascii: 62D52AEC $506B473E673E38EA9FECB7A5A73DD1E1FC37B555 $51691C7926B134AB582F3489D23A95E59DC3470C $51972320F5F278EFD1467943A9B70A73207A9298 $51D5A72A2C78D1372BE1CB1F3EE382C37763B1FF $51FAFEABB266B7E4E1EB4E6120DF2D7F719157EB $526AD50C9DE6AF533DEBE8F
Nov 3, 2024 09:42:02.398596048 CET	1236	IN	Data Raw: 34 46 45 42 33 42 44 33 36 33 32 32 35 43 35 36 46 45 34 32 39 39 31 33 45 35 34 30 45 35 46 43 20 24 36 30 35 32 42 37 44 43 30 30 46 34 45 38 36 42 37 36 30 33 35 30 31 35 31 36 36 35 35 31 30 42 42 39 41 45 34 43 30 33 20 24 36 30 45 35 32 31 Data Ascii: 4FEB3BD363225C56FE429913E540E5FC $6052B7DC00F4E86B760350151665510BB9AE4C03 $60E521B632D83971ECF8D454AF558F2C238BC9A5 $6183B493ACFF41B28745CF0322E75AD7BDE4A48B $61A2104D7E69867C3F3EF981077266F968C1752A $6212040CE7774652B4F727940E6F632E015023DD
Nov 3, 2024 09:42:02.398607969 CET	1236	IN	Data Raw: 34 30 46 38 33 44 42 32 32 31 30 35 34 38 20 24 37 33 38 35 36 31 39 32 45 45 32 31 44 46 46 43 33 37 46 36 39 35 31 38 36 31 46 42 31 39 35 39 36 37 39 41 35 35 35 38 20 24 37 34 31 33 36 37 35 45 44 32 35 32 42 32 39 33 39 35 35 36 45 44 30 30 Data Ascii: 40F83DB2210548 $73856192EE21DFFC37F6951861FB1959679A5558 $7413675ED252B2939556ED0098C3983D1AF3191A $745107A651BCFE497C211D4EC93853B10E68F723 $74F49CD5F9E94EDBF1F8D8705B4C64E88C1CC344 $75508825246CE844F3DD603634AB75029C6EC52D $75ADD82FA44C8E7D7
Nov 3, 2024 09:42:02.398621082 CET	636	IN	Data Raw: 35 32 32 46 33 30 41 33 43 45 41 37 43 36 39 32 41 30 34 31 38 43 39 33 36 32 33 32 42 41 32 45 35 34 46 38 42 33 20 24 38 41 42 37 36 36 46 42 31 42 45 35 34 36 36 39 35 35 39 42 38 32 31 36 35 39 36 34 42 38 44 37 39 44 41 38 30 31 31 39 20 24 Data Ascii: 522F30A3CEA7C692A0418C936232BA2E54F8B3 $8AB766FB1BE54669559B82165964B8D79DA80119 $8B30FEEE3790A40063AAF8E71EC8773F71FB60BF $8B67321D615A8487044C44722654285E6D3C5763 $8B70848F74BD5A90F6B9E0CB555E7D8C18FF325F $8BBA3623CD5404A8F173DC4CC9EBBE3B09D
Nov 3, 2024 09:42:02.403350115 CET	1236	IN	Data Raw: 36 42 46 46 32 33 35 43 41 37 46 34 41 35 31 42 45 43 34 36 30 37 35 42 35 41 35 42 31 35 30 39 20 24 39 32 34 37 42 35 34 44 43 44 34 39 31 37 34 44 42 44 38 31 37 41 41 37 33 46 44 36 44 45 38 30 34 44 46 45 43 32 43 32 20 24 39 32 41 38 43 38 Data Ascii: 6BFF235CA7F4A51BEC46075B5A5B1509 $9247B54DCD49174DBD817AA73FD6DE804DFEC2C2 $92A8C8292F06E18B116DDD50F517040A17D80512 $93515322616E4C93FFB5993936F187B0DE005F8C $9376A43695CBB66C256DCC87932EE885EA9AF5EC $94E412F3EE1978C5E60BF22A15D17F710CCDBE89

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49807	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:02.726516962 CET	292	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49810	216.218.219.41	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:03.430289030 CET	292	OUT	GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:04.208641052 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:04 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:04 GMT Data Raw: 72 6f 75 74 65 72 20 43 61 6c 79 78 49 6e 73 74 69 74 75 74 65 31 34 20 31 36 32 2e 32 34 37 2e 37 34 2e 32 30 31 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 63 46 41 64 4a 77 74 61 52 76 76 62 52 78 4a 4d 67 79 7a 71 6c 62 66 71 6e 32 70 72 48 67 72 55 43 66 67 4c 62 33 50 32 46 76 42 56 54 35 41 51 41 67 42 41 44 38 42 78 4b 39 0a 55 58 46 6f 67 48 46 6f 48 6b 6a 2f 75 62 42 31 56 73 78 30 2f 6f 6d 4d 4f 77 51 39 55 74 54 6f 65 50 62 5a 72 56 37 50 43 64 77 46 45 65 68 33 55 35 5a 68 56 65 78 76 30 55 35 4b 78 39 4d 64 0a 4d 6a 69 43 77 4d 30 44 56 65 4f 5a 6a 52 59 76 47 56 53 39 6d 6b 65 46 41 67 6e 34 2f 4d 6f 44 53 74 41 6a 4f 63 79 6e 6f 68 68 55 5a 76 30 4b 4d 35 6a 6f 31 41 30 58 44 51 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 2f 41 63 53 76 56 46 78 [TRUNCATED] Data Ascii: router CalyxInstitute14 162.247.74.201 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1cFAdJwtaRvvbRxJMgyzqlbfqn2prHgrUCfgLb3P2FvBVT5AQAgBAD8BxK9UXFogHFoHkj/ubB1Vsx0/omMOwQ9UtToePbZrV7PCdwFEeh3U5ZhVexv0U5Kx9MdMjiCwM0DVeOZjRYvGVS9mkeFAgn4/MoDStAjOcynohhUZv0KM5jo1A0XDQk=-----END ED25519 CERT-----master-key-ed25519 /AcSvVFxaIBxaB5I/7mwdVbMdP6JjDsEPVLU6Hj22a0platform Tor 0.4.8.11 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 21:38:06fingerprint 0011 BD24 85AD 45D9 84EC 4159 C88F C066 E5E3 300Euptime 14400629bandwidth 1073741824 1073741824 12699621extra-info-digest 0F4AA0434F60AD87F09D31098FFF73F0E7D6AA76 3F/luXTeOylojIJoIcKNWfqsj827uYe6C8giWPiBrQkonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMB3MZyFvCuTrMOmsB+jQFR1RUL6+KofY0IaPoL2z0Eyvc3H++IvSnN+X1ypZGgiLYqPSSCzYiEi/du0UawoeiY921CiRxiTCnPEmlXvm0FD+VKMFwlcajvER20yve/7dHOmezbBBpRp2HYCLlFncedYxNOzywb [TRUNCATED]
Nov 3, 2024 09:42:04.208667994 CET	1236	IN	Data Raw: 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 67 70 36 2b 67 4e 37 45 62 31 59 75 6e 39 39 77 50 44 Data Ascii: C KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMgp6+gN7Eb1Yun99wPDtSts0mfttMgajuQ7eJmfPEnMK2FBEhUkkOkf96cmI9X3PfqEC8bcdhx6OPLbxfEsz/GLBYJ0GLuOiT+10GAraFwHp+t4Hym0StCRGng6b/oey2wZoSJ3JdOkSUzAYTbVnNJguksh1IK7wrdXL23AXEKHAgMBAAE
Nov 3, 2024 09:42:04.208679914 CET	1236	IN	Data Raw: 37 34 41 31 35 46 31 32 43 33 32 41 33 36 46 45 30 46 32 20 24 38 31 45 44 46 42 43 38 46 36 46 35 43 37 43 46 30 41 44 44 35 46 38 45 30 38 42 43 38 46 41 42 41 30 34 30 38 39 43 36 20 24 38 34 44 33 36 31 42 37 33 36 41 38 43 44 31 45 38 38 31 Data Ascii: 74A15F12C32A36FE0F2 $81EDFBC8F6F5C7CF0ADD5F8E08BC8FABA04089C6 $84D361B736A8CD1E8818D0FC186892E91AB76881 $A7C7EB2A0DFB2E3FFFC12B7756707433DD550F9E $B34CC9056250847D1980F08285B01CF0B718C0B6 $E4D1F25DFBE484208866BA4A1A958B73127CB0AD $E8663924FE2A
Nov 3, 2024 09:42:04.208718061 CET	808	IN	Data Raw: 20 2a 3a 33 36 39 30 0a 61 63 63 65 70 74 20 2a 3a 34 33 32 31 0a 61 63 63 65 70 74 20 2a 3a 34 36 34 33 0a 61 63 63 65 70 74 20 2a 3a 35 30 35 30 0a 61 63 63 65 70 74 20 2a 3a 35 31 39 30 0a 61 63 63 65 70 74 20 2a 3a 35 32 32 32 2d 35 32 32 33 Data Ascii: :3690accept :4321accept :4643accept :5050accept :5190accept :5222-5223accept :5228accept :5900accept :6660-6669accept :6679accept :6697accept :8000accept :8008accept :8074accept :8080accept :8087-8088accept *:8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49814	216.218.219.41	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:03.785096884 CET	292	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:04.558005095 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:04 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:04 GMT Data Raw: 72 6f 75 74 65 72 20 46 72 65 65 45 78 69 74 20 31 37 39 2e 34 33 2e 31 35 39 2e 32 30 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 68 5a 41 64 76 53 4a 47 6b 62 67 72 41 44 2f 4a 6b 2b 58 4a 62 69 4e 6f 34 50 63 4b 46 49 68 36 6d 36 2f 33 7a 61 46 2b 41 75 77 50 47 72 41 51 41 67 42 41 43 4d 4c 6b 52 69 0a 67 61 66 30 6d 47 58 35 35 63 2b 32 31 51 4b 4d 75 53 6e 74 64 65 68 46 68 7a 30 71 65 30 50 53 4b 37 6d 44 63 65 4f 6a 46 52 48 48 37 76 4a 34 51 43 34 36 63 50 4e 50 47 59 43 4b 41 4b 7a 6b 0a 44 50 5a 33 5a 57 30 32 66 44 44 56 59 37 4c 59 43 32 6b 51 50 32 73 4d 4f 7a 52 53 76 7a 6d 67 78 75 42 41 56 58 75 72 2b 35 65 4f 4d 44 38 63 39 42 63 30 2b 50 53 58 51 51 49 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6a 43 35 45 59 6f 47 6e 39 4a 68 6c 2b 65 58 [TRUNCATED] Data Ascii: router FreeExit 179.43.159.200 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1hZAdvSJGkbgrAD/Jk+XJbiNo4PcKFIh6m6/3zaF+AuwPGrAQAgBACMLkRigaf0mGX55c+21QKMuSntdehFhz0qe0PSK7mDceOjFRHH7vJ4QC46cPNPGYCKAKzkDPZ3ZW02fDDVY7LYC2kQP2sMOzRSvzmgxuBAVXur+5eOMD8c9Bc0+PSXQQI=-----END ED25519 CERT-----master-key-ed25519 jC5EYoGn9Jhl+eXPttUCjLkp7XXoRYc9KntD0iu5g3Eplatform Tor 0.4.8.10 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 16:25:59fingerprint 5A82 9292 6C5E 5A24 6D35 B843 A729 42FC EC23 5BACuptime 25164563bandwidth 1073741824 1073741824 24652284extra-info-digest 4C82EBF85E068B895D9CED55064E5B5D2374C838 FCBswJVtO1JV5y9tvUpsJQYyDHYI0Q2dkns/ZcrEPBYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKlTxk7HZTUduzD+rhfkL0OgAbjljsB5K6xLQpBq5Av+4AE94c+faVg5zBkggYxFH2mXTrgXBGrA8yjzqrbY0iko5P712E14ljAoRD5AVkf1t85jGCopl1HSyRqndJbiG/sgglOWOHH1ltJNXsYVlObuxRNbeu5KcTca1P [TRUNCATED]
Nov 3, 2024 09:42:04.558031082 CET	764	IN	Data Raw: 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 42 70 70 46 4f 42 74 38 64 4f 45 73 75 4e 31 45 79 4a 30 62 70 79 6a 54 51 Data Ascii: ---signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMBppFOBt8dOEsuN1EyJ0bpyjTQdTBJJj3350JeI2dxZhcv7CUfyIS05jNOwHJ43aXXItaHy6lzZtD6gwd6rjd1pJdjQ29RtEcdT7o1fV38HOqg4xxTLhhebtEIhJGc1+R5+Ay5hN3GJnxywrZKXdWplh9VzjrTpFI0UftvhswxpAgMBAAE=-----
Nov 3, 2024 09:42:04.558042049 CET	1236	IN	Data Raw: 31 42 44 37 31 31 39 34 44 33 37 43 38 36 37 46 45 44 35 41 32 31 20 24 32 37 33 30 37 38 42 39 34 34 36 37 35 35 38 38 34 32 39 36 33 43 45 30 41 30 32 42 32 44 30 35 38 45 32 38 32 34 45 39 20 24 32 37 43 35 43 46 43 39 41 30 43 44 38 43 31 32 Data Ascii: 1BD71194D37C867FED5A21 $273078B94467558842963CE0A02B2D058E2824E9 $27C5CFC9A0CD8C12034BCE47D21E68ABC98A360E $5A8292926C5E5A246D35B843A72942FCEC235BAC $617C95FCF5F00E98E73E35A71C066ED20614F26D $68A54E180F778AFE96C7906A528B1EFEDFD42A47 $6F77E95EF
Nov 3, 2024 09:42:04.558056116 CET	900	IN	Data Raw: 38 32 0a 61 63 63 65 70 74 20 2a 3a 32 30 38 33 0a 61 63 63 65 70 74 20 2a 3a 32 30 38 36 2d 32 30 38 37 0a 61 63 63 65 70 74 20 2a 3a 32 30 39 35 2d 32 30 39 36 0a 61 63 63 65 70 74 20 2a 3a 32 31 30 32 2d 32 31 30 34 0a 61 63 63 65 70 74 20 2a Data Ascii: 82accept :2083accept :2086-2087accept :2095-2096accept :2102-2104accept :3128accept :3389accept :3690accept :4321accept :4643accept :5050accept :5190accept :5222-5223accept :5228accept :5900accept *:6660-6669accep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49823	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:05.995249033 CET	292	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49827	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:07.082775116 CET	292	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49828	193.23.244.244	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:07.106770992 CET	292	OUT	GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:08.178740025 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:08 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:08 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 34 35 2e 31 34 31 2e 32 31 35 2e 35 36 20 38 34 33 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 61 59 56 48 44 30 51 71 75 63 6c 6d 58 48 49 76 62 77 6c 64 43 45 49 59 4f 6f 36 59 6c 5a 37 50 7a 74 73 42 35 72 57 6d 30 43 65 41 51 41 67 42 41 42 59 4b 72 38 6d 0a 69 49 64 59 75 76 36 65 58 71 66 79 62 73 79 39 36 68 64 6b 57 69 51 63 37 31 51 68 55 6a 34 61 54 54 35 35 79 6b 78 45 67 66 45 36 38 6e 39 50 64 47 39 58 53 62 6c 35 2b 77 55 2f 49 50 38 43 0a 79 46 63 55 4b 56 46 37 49 6b 7a 41 42 73 6a 32 65 32 52 45 34 37 30 6a 52 6b 4c 36 77 74 63 6b 6b 71 73 58 78 4b 6a 75 39 59 70 44 76 33 63 4b 45 2f 5a 31 54 64 32 48 65 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 57 43 71 2f 4a 6f 69 48 57 4c 72 2b [TRUNCATED] Data Ascii: router Quetzalcoatl 45.141.215.56 8430 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAaYVHD0QquclmXHIvbwldCEIYOo6YlZ7PztsB5rWm0CeAQAgBABYKr8miIdYuv6eXqfybsy96hdkWiQc71QhUj4aTT55ykxEgfE68n9PdG9XSbl5+wU/IP8CyFcUKVF7IkzABsj2e2RE470jRkL6wtckkqsXxKju9YpDv3cKE/Z1Td2Hegg=-----END ED25519 CERT-----master-key-ed25519 WCq/JoiHWLr+nl6n8m7MveoXZFokHO9UIVI+Gk0+ecoor-address [2a12:a800:2:1:45:141:215:56]:8430platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:23:48fingerprint 5A7D E908 3BE6 228A 4339 55A4 649C 9865 C909 676Auptime 324066bandwidth 1073741824 1073741824 7290636extra-info-digest 865236792538F6B57AAE337CF4E02E067C9751FF sRTzbsfqZuyJF2Gvyllzvrxo4gE3M8qWYmDho/a1rO8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM7rdccbDS85i2LeGoAluJvxILf260QWFZvcDJhVdB3wS2JewPwi7rfjDRnTj5XXJc2Gm6PYCxjkByB/glW/IvbrfkQ+Y608Blbq04EEZvXwS1i/ACBgA1Ya [TRUNCATED]
Nov 3, 2024 09:42:08.178910971 CET	1236	IN	Data Raw: 48 6d 68 78 5a 5a 4d 75 71 76 51 46 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 Data Ascii: HmhxZZMuqvQFAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL14+tqxvYaTEw9V1DasHGlbNVgSjQUSkOUnZ9sFctWhskzK4lwpminq7l40C3wc0UjDRSPavBd5PLfBg7uu3yEzj3mBX5usFbk5VlshkML/4ZGEleS+6SyFQWMFqyIxTnPtEIg6rfE5
Nov 3, 2024 09:42:08.178921938 CET	424	IN	Data Raw: 31 38 30 33 33 41 32 32 38 32 37 45 33 43 34 36 20 24 30 41 37 36 43 30 41 30 41 37 32 31 44 44 42 43 33 32 34 42 37 30 35 41 44 42 46 43 39 35 46 44 38 30 36 41 45 38 35 35 20 24 30 41 46 39 38 32 43 43 37 31 41 30 31 44 39 35 45 38 39 35 39 44 Data Ascii: 18033A22827E3C46 $0A76C0A0A721DDBC324B705ADBFC95FD806AE855 $0AF982CC71A01D95E8959D763D0EC0E5A6C61244 $0B5BC76B3BE7553B229FD3E73F26AED41C31DD19 $0B8EF5F5016926F4245350FB37914E30BF36C528 $0CD666F9C9A40A8CFB1E6B9465597A51D3A1CBF8 $0CF48696F004482
Nov 3, 2024 09:42:08.178932905 CET	1236	IN	Data Raw: 38 30 36 45 45 33 35 33 32 35 34 31 20 24 31 32 37 45 38 30 33 38 38 38 44 38 32 46 33 33 43 43 33 43 33 31 31 45 43 43 36 43 43 45 42 37 37 30 38 38 33 31 43 42 20 24 31 33 30 43 46 43 46 33 38 42 41 33 33 32 37 45 33 30 30 31 41 31 44 42 32 41 Data Ascii: 806EE3532541 $127E803888D82F33CC3C311ECC6CCEB7708831CB $130CFCF38BA3327E3001A1DB2A4B5ACBDAE248D9 $13CADC9E09F30AF24A98B44E88323DB655A803E9 $13FBC97516DC854399E70BC7CA9A4513FFD4F08C $140E4FC6202FE17F46337058FC9848FA9055482B $149E584199DAD5966FA
Nov 3, 2024 09:42:08.178945065 CET	1236	IN	Data Raw: 37 33 33 36 38 42 46 34 45 36 35 45 39 45 42 32 43 43 45 34 33 44 31 33 32 45 45 37 46 41 41 46 33 30 39 33 20 24 32 45 42 38 39 37 35 37 46 31 44 38 32 32 38 37 38 34 33 33 35 32 33 32 45 32 43 45 32 39 38 39 44 32 32 30 45 35 39 30 20 24 32 45 Data Ascii: 73368BF4E65E9EB2CCE43D132EE7FAAF3093 $2EB89757F1D8228784335232E2CE2989D220E590 $2EC5EE348BD8D9D2E518B2CAEA9C671E2D5F77A6 $2EF3F194E34705F9E13021BAC7B394653329243A $2EFC2B8BC724CF435C14066087936BE7CA3C57A3 $30C472441D910A8BCDA571F2637C80119E76D
Nov 3, 2024 09:42:08.178956985 CET	1236	IN	Data Raw: 43 38 41 46 43 41 43 42 38 33 39 35 42 33 37 34 31 31 20 24 33 45 46 41 37 42 30 32 35 39 36 39 31 36 43 41 37 46 46 35 39 43 37 41 33 41 37 41 38 41 38 44 35 36 42 37 41 31 45 38 20 24 33 46 33 38 43 31 37 43 31 31 42 34 33 35 36 32 37 36 36 42 Data Ascii: C8AFCACB8395B37411 $3EFA7B02596916CA7FF59C7A3A7A8A8D56B7A1E8 $3F38C17C11B43562766B50A95366B021CBCC7ADA $3F6E66FDA54B0CED35F01A16AF5D034DDDD8D48C $409BD5AEC15BF5D2B983C6F064D852B0ADE0C8BD $410C2D96F0749813FDBBB15D079FC03BAEF6BFD1 $42708A1289250
Nov 3, 2024 09:42:08.178978920 CET	1236	IN	Data Raw: 20 24 35 34 36 36 32 39 39 33 36 35 31 38 32 31 34 44 43 46 43 46 37 38 34 45 38 37 35 44 30 45 42 45 35 32 45 30 35 35 32 44 20 24 35 34 36 38 37 44 35 39 46 38 43 38 44 39 30 30 35 36 43 41 39 34 38 34 39 39 37 30 42 33 36 32 44 41 33 38 35 44 Data Ascii: $546629936518214DCFCF784E875D0EBE52E0552D $54687D59F8C8D90056CA94849970B362DA385DAD $552C2E2AFDD1B740A38CA9768C51EC011B2AF701 $555A6B7CB3D8ECA376B4CB6701596A7B211E21D3 $56D878C942CD38F5287079974950668B18ECC4CD $5756D9C403D89B79AFE69D50BB0682B
Nov 3, 2024 09:42:08.178992987 CET	1236	IN	Data Raw: 36 37 37 43 31 45 38 43 36 31 45 37 32 34 42 44 34 36 36 43 45 38 41 30 20 24 36 34 36 42 34 45 33 39 42 34 39 46 33 30 33 42 34 42 35 35 32 41 38 46 33 43 42 42 38 46 43 44 34 30 42 45 37 45 42 35 20 24 36 34 44 39 30 39 35 39 45 35 30 44 35 39 Data Ascii: 677C1E8C61E724BD466CE8A0 $646B4E39B49F303B4B552A8F3CBB8FCD40BE7EB5 $64D90959E50D593D80ACD0E29A2BE9051EB66EEA $656BA6C00B21DB086611171C946288A29E2DF5BC $659B0645A1C264D9D8FF4C9DD2B08ADAC392D475 $65A398E9A697A4645937B086CDA1D9A5C57B9509 $676C3E3
Nov 3, 2024 09:42:08.179003000 CET	1236	IN	Data Raw: 44 32 41 44 30 44 20 24 37 36 34 34 42 35 37 44 44 38 36 33 30 35 46 33 42 38 31 37 32 46 45 46 36 43 45 45 38 35 38 36 34 44 30 38 38 42 41 37 20 24 37 36 42 41 43 43 39 30 43 42 41 37 31 37 31 34 39 31 38 35 35 34 31 35 36 43 41 41 42 45 39 35 Data Ascii: D2AD0D $7644B57DD86305F3B8172FEF6CEE85864D088BA7 $76BACC90CBA71714918554156CAABE955E7A940F $76CA419C68502FFC4D950D167E25EE0AD3A0A764 $77313C32AA48AB658299DA039DF6C627C126F570 $77D53F8C9545D1E6A4D3532E9E2D8474460933B9 $799F36F3EAD423C23E7635115
Nov 3, 2024 09:42:08.179020882 CET	1236	IN	Data Raw: 44 36 31 35 31 46 30 34 32 37 44 34 41 31 35 38 45 37 31 44 36 32 45 32 31 45 30 37 36 36 20 24 38 44 34 36 33 39 46 31 33 35 43 39 30 38 45 42 39 33 42 34 32 32 34 42 41 37 31 39 31 38 34 45 41 41 31 45 36 44 30 35 20 24 38 45 32 32 44 37 35 44 Data Ascii: D6151F0427D4A158E71D62E21E0766 $8D4639F135C908EB93B4224BA719184EAA1E6D05 $8E22D75D49EFBBEA1D719976D5A78750B2C0C227 $8E477758547F612659BD2864C91D641452833369 $8EAE810FA33F26341605D59F82D8AD58F7EA6CC5 $8EEDA34CE6D6E605ED3179278F45882654923280 $9
Nov 3, 2024 09:42:08.183847904 CET	1236	IN	Data Raw: 45 33 37 37 37 35 45 41 31 45 45 42 20 24 41 31 35 36 37 36 46 35 46 30 46 32 42 41 37 42 31 43 41 35 34 34 34 36 44 44 42 34 36 42 45 45 36 46 36 39 39 41 39 35 20 24 41 31 41 42 31 33 34 31 32 33 46 39 46 35 33 34 43 37 45 30 39 42 36 38 34 31 Data Ascii: E37775EA1EEB $A15676F5F0F2BA7B1CA54446DDB46BEE6F699A95 $A1AB134123F9F534C7E09B6841A7ECAFD0282240 $A1F57EBAAC183C6B0A49E62E5B23E8C1BB6C1022 $A4F42AE65F11634C42A3F3952E719F47091BD36F $A5BBC2C61B1F6B09097011C4CE56BBE57DE5AC92 $A6191F3949C33923923

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49834	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:08.158309937 CET	292	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49839	193.23.244.244	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:08.704339027 CET	292	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49845	193.23.244.244	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:09.799597025 CET	292	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49851	45.66.35.11	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:10.857088089 CET	289	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49858	45.66.35.11	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:12.267961025 CET	289	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:13.323195934 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:13 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:13 GMT Data Raw: 72 6f 75 74 65 72 20 70 75 6e 69 73 68 65 72 20 38 31 2e 37 39 2e 34 35 2e 31 38 34 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 65 64 41 63 64 46 70 79 2f 47 44 76 65 4b 44 47 44 50 63 5a 57 72 46 78 36 45 4b 48 50 4d 77 57 52 4c 31 71 72 76 62 30 45 49 6d 66 5a 57 41 51 41 67 42 41 44 48 74 59 37 64 0a 32 4d 6f 68 55 31 63 58 63 57 34 6d 4d 58 48 67 4e 50 30 6a 6d 41 52 44 4d 77 63 58 66 70 6b 31 52 72 5a 43 76 6b 65 4d 70 6c 45 7a 6a 76 77 57 5a 74 4d 6b 77 38 6d 33 73 50 56 4b 38 39 45 73 0a 33 49 4c 58 6d 6b 45 77 62 37 6d 44 57 43 74 79 6f 50 32 6f 72 30 4b 2b 58 6d 68 31 68 30 6f 36 41 56 71 45 2f 73 47 77 72 70 36 66 44 35 52 78 69 79 66 71 6c 31 72 43 76 67 30 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 78 37 57 4f 33 64 6a 4b 49 56 4e 58 46 33 46 75 4a [TRUNCATED] Data Ascii: router punisher 81.79.45.184 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1edAcdFpy/GDveKDGDPcZWrFx6EKHPMwWRL1qrvb0EImfZWAQAgBADHtY7d2MohU1cXcW4mMXHgNP0jmARDMwcXfpk1RrZCvkeMplEzjvwWZtMkw8m3sPVK89Es3ILXmkEwb7mDWCtyoP2or0K+Xmh1h0o6AVqE/sGwrp6fD5Rxiyfql1rCvg0=-----END ED25519 CERT-----master-key-ed25519 x7WO3djKIVNXF3FuJjFx4DT9I5gEQzMHF36ZNUa2Qr4platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 02:26:25fingerprint 5A91 4CC3 19F0 6AE7 262E E441 FF31 D188 B483 1077uptime 910148bandwidth 524288 1048576 657461extra-info-digest 51A9775FC7D0478CA7056F8D75D39E9328EF7A09 DbSGaNnZaKjPS0ZP/JH+z5n9jJojVm7WsaST9Qh4nasonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK4hS2VfKtt/UdC+4wYsxHWajC/v3qKqwr6vvNJDsJsaPEce414LFRhgzoRaWGwYSOkG2hdRCL1NZFlaXN9srvw1tHX3dD3dFwTvtVXj1bKyz5XnHi1kWVUtjBaj4hLHPkhWIfQQPIpdMe1NjQGo1B3DaPHuKvDiysj94XuOjj0vAgMBAAE [TRUNCATED]
Nov 3, 2024 09:42:13.323268890 CET	1207	IN	Data Raw: 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4e 75 39 61 38 35 34 4f 61 50 74 4d 76 66 63 47 4e 4e 75 4a 58 54 30 68 43 52 52 49 6f 6e 66 4d 56 4a 62 73 67 4a Data Ascii: ey-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMNu9a854OaPtMvfcGNNuJXT0hCRRIonfMVJbsgJlQDDuVxUkXiVj1zBhPZ12TlwtVWu7oL4NXPlKt2U+Ea4ow9K/lmzwanr7s+aE5jHNhcNthOllm6WZoqe0NXndlOW1LvR895DK8O+pK1rNo/44ypNsGZqRo4nCYyPWsFoLgJfAgMBAAE=-----END RSA PUBLI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49904	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:21.983467102 CET	292	OUT	GET /tor/server/fp/26d8359bdf32a07604ce9fa14e6f1fea9364564b HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:22.743839025 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:22 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:22 GMT Data Raw: 72 6f 75 74 65 72 20 44 45 31 20 31 33 30 2e 36 31 2e 31 34 32 2e 31 33 33 20 39 30 32 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 59 58 41 52 6b 62 4f 58 78 70 70 49 6b 6b 6d 78 77 47 51 30 47 43 78 4f 54 52 58 72 34 46 6b 5a 75 6f 57 7a 72 2f 52 51 2f 56 53 6f 75 6b 41 51 41 67 42 41 44 71 64 54 56 76 0a 57 44 45 4b 4f 74 37 45 31 70 6d 71 4b 65 4c 45 6f 58 5a 75 35 4e 31 65 58 49 79 36 6c 77 5a 4e 41 2f 49 63 66 6a 4c 51 6a 68 71 34 41 51 48 7a 73 69 4e 47 47 4a 6a 33 67 7a 52 76 49 6a 63 77 0a 45 67 36 72 36 50 73 5a 7a 4f 6c 59 57 77 55 6f 32 4e 4a 57 77 79 75 38 2b 64 79 44 5a 2b 67 50 67 38 57 46 77 43 6a 64 49 67 43 53 78 65 7a 6c 73 50 31 30 30 46 74 75 44 67 55 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 36 6e 55 31 62 31 67 78 43 6a 72 65 78 4e 61 5a 71 69 6e 69 [TRUNCATED] Data Ascii: router DE1 130.61.142.133 9024 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1YXARkbOXxppIkkmxwGQ0GCxOTRXr4FkZuoWzr/RQ/VSoukAQAgBADqdTVvWDEKOt7E1pmqKeLEoXZu5N1eXIy6lwZNA/IcfjLQjhq4AQHzsiNGGJj3gzRvIjcwEg6r6PsZzOlYWwUo2NJWwyu8+dyDZ+gPg8WFwCjdIgCSxezlsP100FtuDgU=-----END ED25519 CERT-----master-key-ed25519 6nU1b1gxCjrexNaZqinixKF2buTdXlyMupcGTQPyHH4or-address [2603:c020:8006:4801:1::]:9024platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 21:44:09fingerprint 26D8 359B DF32 A076 04CE 9FA1 4E6F 1FEA 9364 564Buptime 4572184bandwidth 78643200 393216000 19481324extra-info-digest 9A9A9C1D660E57663A106ABC92480C79D578535B QXnu4T4gk0Bbn0GfhtSbZdmw2h3f9a08ENltX/5WpYoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOy+hK6Sx5fnoAN6ehx6P1Mx2209BQmUEk5ejTGscaJALXNEsvdWz+xDjAd3PlrZh6pE+rcNh7rTve7+q5Yfb71wQ+vrUGEtWUB6bpnMQD7I7r0154h3rpJQWSWN6RZlnIoWq [TRUNCATED]
Nov 3, 2024 09:42:22.743863106 CET	1236	IN	Data Raw: 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 Data Ascii: gMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAJjmS6afhCCYLFAKBe4SaAS2pfBCb4u2OyPZVXD+SVVnN9RKwt06oTVjV0HvOHtroTFwPMlXBySZYOl5TY21l+sCZOg4u92MYu0n1XHt9F7nSKSJuOmjwwI9+OrDMZPQN4LrLpeYipZ05O9yi1vL7ID5D
Nov 3, 2024 09:42:22.743875980 CET	976	IN	Data Raw: 46 41 38 20 24 33 46 30 41 34 41 46 34 42 34 32 43 42 30 41 36 31 34 31 46 38 45 39 35 37 42 42 46 35 42 33 46 34 31 31 35 43 45 45 32 20 24 34 36 32 35 41 33 43 41 35 41 37 39 39 38 36 43 30 31 33 38 43 42 45 43 31 34 43 32 41 45 31 39 37 35 31 Data Ascii: FA8 $3F0A4AF4B42CB0A6141F8E957BBF5B3F4115CEE2 $4625A3CA5A79986C0138CBEC14C2AE197511D8F1 $46D304AFE2DEBBA62526424D9DFEB1B61C78F1B4 $48B598936740CBE7A433FC6B745B291AC8B8D4B8 $5888B87CE267D1EDB75253D64B0DADAC3BFD7D75 $590AC3C52B1431439DFAB4832747

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49915	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:24.117655993 CET	292	OUT	GET /tor/server/fp/6d07bbbf2bd760ca6acad1525fcc2e6c432cf622 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49919	45.66.35.11	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:24.891963959 CET	289	OUT	GET /tor/server/fp/6d07bbbf2bd760ca6acad1525fcc2e6c432cf622 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:25.918348074 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:25 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:25 GMT Data Raw: 72 6f 75 74 65 72 20 64 6f 77 6e 74 68 65 6d 73 20 32 34 2e 31 35 2e 34 30 2e 31 37 33 20 39 30 34 36 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 66 6a 41 66 57 52 6d 35 4d 59 4b 42 56 5a 50 41 57 7a 59 53 65 66 55 45 2b 53 72 6d 62 6a 37 4e 2f 50 4d 59 68 51 4d 31 73 43 77 38 6a 77 41 51 41 67 42 41 41 74 2f 41 78 58 0a 78 6d 37 63 7a 6f 79 38 38 49 6e 4c 41 2b 56 39 72 76 38 51 65 53 50 41 72 6d 59 36 5a 76 2b 47 53 74 53 37 67 4e 35 44 56 4e 42 41 32 74 59 4c 44 63 47 56 71 6f 4e 47 42 75 55 56 43 53 38 6f 0a 49 4d 6e 56 6d 55 6a 41 30 31 39 4c 34 7a 65 79 71 61 4a 6f 32 55 6c 53 76 50 71 48 53 51 71 51 75 67 63 66 49 72 54 32 6c 45 33 74 50 36 35 39 6d 43 78 74 71 38 6b 51 31 67 6f 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4c 66 77 4d 56 38 5a 75 33 4d 36 4d 76 50 43 4a [TRUNCATED] Data Ascii: router downthems 24.15.40.173 9046 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1fjAfWRm5MYKBVZPAWzYSefUE+Srmbj7N/PMYhQM1sCw8jwAQAgBAAt/AxXxm7czoy88InLA+V9rv8QeSPArmY6Zv+GStS7gN5DVNBA2tYLDcGVqoNGBuUVCS8oIMnVmUjA019L4zeyqaJo2UlSvPqHSQqQugcfIrT2lE3tP659mCxtq8kQ1go=-----END ED25519 CERT-----master-key-ed25519 LfwMV8Zu3M6MvPCJywPlfa7/EHkjwK5mOmb/hkrUu4Aplatform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 16:15:19fingerprint 6D07 BBBF 2BD7 60CA 6ACA D152 5FCC 2E6C 432C F622uptime 129691bandwidth 1073741824 1073741824 742400extra-info-digest CD12219E677A83C9D2261E8A4AA196E599B13421 JyINCh6k4+J9Mw6uFjSm6r216rY8zSR1SD+sewcB+wEonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALExE9owQWVUKG5OLUy/ZSuZqGX5pDYnvZfy9mrpbrRMTawPBiTd3Oou8jooxazFRQA97OVZ9DwJXfL4eMaFh6nzveKqiVDkELvDUX89zzPM300Xg5TM3MXsipAnU5Cq9vgLKfP3T8aoHGanQxJNO1FxNrjaOJwWLRPO+5BuBkO [TRUNCATED]
Nov 3, 2024 09:42:25.918361902 CET	212	IN	Data Raw: 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 2f 53 42 6e 65 52 51 50 33 75 6d 37 39 38 4a 79 45 77 73 2b 30 56 32 41 35 71 61 6f 70 47 Data Ascii: igning-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL/SBneRQP3um798JyEws+0V2A5qaopGNjjObm/sLTrMfvBKEfGCCdrLLVilAvohP5L320DsmlKlh/jtLhgYhqZIVsBqksR6/K8i37ma/tp9RfB/00yIQp2p0O4GGLfZ0ZTCsoVcUi1CHE5XRQSXVxuGJCGT44vk
Nov 3, 2024 09:42:25.918373108 CET	1004	IN	Data Raw: 59 47 61 37 50 6f 47 5a 67 45 33 37 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 6f 6e 69 6f 6e 2d 6b 65 79 2d 63 72 6f 73 73 63 65 72 74 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 43 Data Ascii: YGa7PoGZgE37AgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----PwSfCpVsbBvm+wLgDz02owd1FTDJRNw8XG+o3hpqOeseshm4UenmvdlU0pRAwNlTSpksyiyZYcxNb+HrHtlCfJoB+BnRGAYs5lW2ZNPVRP4t5m5MmhA96pV6Rkpxi9MnQFtagQy9ZhSyL1RY4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49926	193.23.244.244	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:26.308443069 CET	292	OUT	GET /tor/server/fp/54f33a3a16b6ea44f2db3627fc55753ce6c2249b HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49932	45.66.35.11	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:27.371567965 CET	289	OUT	GET /tor/server/fp/54f33a3a16b6ea44f2db3627fc55753ce6c2249b HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:28.409725904 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:28 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:28 GMT Data Raw: 72 6f 75 74 65 72 20 73 65 6c 6c 65 72 69 65 20 31 30 39 2e 37 30 2e 31 30 30 2e 33 20 39 30 30 35 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 74 56 41 65 59 33 39 32 32 30 48 42 72 41 70 4f 71 66 48 39 59 70 49 58 37 4f 36 71 36 69 4b 4d 42 55 7a 59 75 55 42 75 37 6d 79 57 47 35 41 51 41 67 42 41 44 49 6b 68 78 30 0a 42 75 34 61 6f 79 4d 78 57 5a 5a 78 4e 47 49 69 62 41 39 78 7a 7a 6b 34 68 58 61 49 6f 55 39 73 41 2f 79 4b 6e 6f 78 2b 2b 62 50 68 6f 63 31 37 72 70 79 43 7a 67 72 64 33 36 62 34 6b 2f 67 75 0a 2b 4c 46 2b 6e 45 35 46 43 78 35 49 50 32 38 55 70 37 5a 2f 52 36 30 50 30 36 47 6c 61 32 65 57 2f 47 4a 6b 6e 7a 48 72 55 54 64 69 78 5a 79 73 39 57 34 79 37 65 37 55 39 41 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 79 4a 49 63 64 41 62 75 47 71 4d 6a 4d 56 6d 57 63 [TRUNCATED] Data Ascii: router sellerie 109.70.100.3 9005 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1tVAeY39220HBrApOqfH9YpIX7O6q6iKMBUzYuUBu7myWG5AQAgBADIkhx0Bu4aoyMxWZZxNGIibA9xzzk4hXaIoU9sA/yKnox++bPhoc17rpyCzgrd36b4k/gu+LF+nE5FCx5IP28Up7Z/R60P06Gla2eW/GJknzHrUTdixZys9W4y7e7U9Ak=-----END ED25519 CERT-----master-key-ed25519 yJIcdAbuGqMjMVmWcTRiImwPcc85OIV2iKFPbAP8ip4or-address [2a03:e600:100::3]:9005platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 01:50:11fingerprint 54F3 3A3A 16B6 EA44 F2DB 3627 FC55 753C E6C2 249Buptime 2534512bandwidth 65536000 131072000 20033800extra-info-digest 54F9C54D6ABBEABFAD065579F819549B72ED99F1 c4cLFKpdxCUP8iYbpqD1bbP6svDOGFfwDKRSUCIP6wQonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANb6q5N00h7TvYTZH5y2Ec0agMLSPnhJ/e5qypLf23T+QtXsPHBcXfBXaRgM1kTiM39hUv+SiQhoXFOwL0xqWKICuKeMRcWvOhviSdJ1sKh5xpiYb1Tvs8dQEM+m+EkSOjs38EHei [TRUNCATED]
Nov 3, 2024 09:42:28.409740925 CET	1236	IN	Data Raw: 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f Data Ascii: AE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAPDRHubQR+ad/DuTVQWNY7fdO85b/YtjdjyZ278V9r67cqAqcymJj+pbB8zFpH2OhT9/LvclN34W68IaZlRaiRlWxafobtpd+k3RpX50JV/z3nbC/qoXPfdY3jpUN3nh5Ncok/qGUX6uS/SwoJTfGdu971W6T
Nov 3, 2024 09:42:28.409750938 CET	1236	IN	Data Raw: 24 31 35 37 44 33 42 42 37 39 44 30 38 42 43 36 36 39 42 46 46 37 34 35 41 31 45 30 31 38 32 35 46 36 45 33 43 38 37 42 41 20 24 31 38 39 33 30 34 31 42 38 36 46 43 45 44 31 41 32 43 45 32 46 39 45 32 43 35 39 38 37 46 35 33 34 42 37 44 43 33 45 Data Ascii: $157D3BB79D08BC669BFF745A1E01825F6E3C87BA $1893041B86FCED1A2CE2F9E2C5987F534B7DC3E0 $1AB5E57A8356C94803B9199FD4A9845854E6A0AC $1CACE884480BB87CC640A51C46087F18F4ABA970 $1CBAA1FCC2F81ED2201D7AEB6A6FBD6D482AFD4F $20A8BC8EE8125FE6852C85FD2438CAE1
Nov 3, 2024 09:42:28.410986900 CET	1188	IN	Data Raw: 37 31 35 42 44 42 41 32 46 32 33 43 46 32 44 33 42 45 34 33 43 46 41 20 24 36 42 34 41 43 42 37 33 31 39 46 41 43 42 32 39 34 39 44 34 45 42 38 31 46 37 33 43 34 44 45 43 44 43 44 32 44 46 42 35 20 24 36 46 39 42 42 43 42 32 41 33 41 42 35 41 31 Data Ascii: 715BDBA2F23CF2D3BE43CFA $6B4ACB7319FACB2949D4EB81F73C4DECDCD2DFB5 $6F9BBCB2A3AB5A1D11BD1871621433BAC8AD9107 $72F3AC8E95AD980DC5F0FCF29FDB1CE72128729E $74FAE33B21FFFFDC6FA11384664023AC8DFDDA4C $763B7D67A6B2D19B3E9EA57D1FBDC48F3B85B559 $79ACC241

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49948	45.66.35.11	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:30.503031969 CET	289	OUT	GET /tor/server/fp/a2d63c32574a5376ec1e6cbae0abdb1538782541 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:31.547535896 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:31 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:31 GMT Data Raw: 72 6f 75 74 65 72 20 63 61 6e 64 69 64 61 70 6f 6c 6c 6f 20 31 38 35 2e 31 37 33 2e 39 33 2e 34 37 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 58 75 41 66 51 4f 63 34 32 39 65 56 56 64 44 4c 53 39 54 51 72 42 48 30 4c 4c 75 67 6b 35 63 61 59 65 34 41 6f 6d 75 2b 39 66 70 66 4a 75 41 51 41 67 42 41 42 6c 75 47 42 35 0a 71 54 31 61 63 4c 4b 4d 76 42 4e 63 53 73 67 35 68 31 54 76 33 42 6d 6a 78 7a 38 4e 79 70 6e 47 39 79 35 4f 35 49 76 79 31 66 65 36 35 6e 38 64 6b 71 7a 6a 66 56 35 6f 2b 38 4f 73 6d 47 54 7a 0a 77 61 65 30 5a 6c 78 6d 76 4d 61 4c 46 37 79 37 42 6e 74 76 42 4d 62 72 36 71 6f 4c 44 75 75 78 66 47 52 70 68 59 6e 76 4c 48 35 62 63 66 34 48 53 2b 31 4b 71 35 53 4a 6a 67 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 5a 62 68 67 65 61 6b 39 57 6e 43 79 [TRUNCATED] Data Ascii: router candidapollo 185.173.93.47 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1XuAfQOc429eVVdDLS9TQrBH0LLugk5caYe4Aomu+9fpfJuAQAgBABluGB5qT1acLKMvBNcSsg5h1Tv3Bmjxz8NypnG9y5O5Ivy1fe65n8dkqzjfV5o+8OsmGTzwae0ZlxmvMaLF7y7BntvBMbr6qoLDuuxfGRphYnvLH5bcf4HS+1Kq5SJjgA=-----END ED25519 CERT-----master-key-ed25519 Zbhgeak9WnCyjLwTXErIOYdU79wZo8c/DcqZxvcuTuQplatform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 05:27:05fingerprint A2D6 3C32 574A 5376 EC1E 6CBA E0AB DB15 3878 2541uptime 12779372bandwidth 1073741824 1073741824 5813271extra-info-digest AF24AA19F404BEB7E5433697509A72E94599E9B2 cAJ45ICCGhYniEvYWIiSUPvxgGrP0pum2pDoUXbEciAonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAJ5iGXG85TsNxDSb1K6VjK9B3Jve1TzHdHUEEuMrs9cteXmLPagQ6poi31HOYf3DniiHUyjblNAYFC0WL/U/nMqvCocHyBXfYe2F66EQBPE2ImzPd7h1KgVCPkD+l9yfShjGcuuKNtLxSxVRugciKwnmOFKcvNllSuj/ [TRUNCATED]
Nov 3, 2024 09:42:31.547568083 CET	1198	IN	Data Raw: 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 6d 2b 35 50 71 37 35 69 6f 6c 38 77 4d 62 38 2f 63 59 65 67 51 50 69 Data Ascii: -----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKm+5Pq75iol8wMb8/cYegQPi7SNmAU0kkxk7lTWgbor4VCFrZ3BifbcrmmEZ1tZiECm4a3+N6eij4zV3ARPk317DFz7rTwvpTXxNwYpmqz+2LFIz4i0AwoBpS8V8H3WkioUOhauNhi0X/+/XdGcpley+cFwmjh2gAXiYzRwy1CvAgMBAAE=---

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	50024	45.66.35.11	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:47.848431110 CET	289	OUT	GET /tor/server/fp/d54db93a10ce45b327ce6cfe6717a559ccbef650 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:48.896330118 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:48 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:48 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 34 35 2e 31 34 31 2e 32 31 35 2e 31 37 20 39 30 30 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 64 74 68 6c 50 75 33 49 54 46 4e 63 33 2f 6e 46 2f 6f 75 36 47 2b 69 78 53 58 43 4c 6e 74 63 79 32 51 42 32 34 67 63 54 44 58 65 41 51 41 67 42 41 42 34 4c 6d 7a 38 0a 6a 65 57 53 73 48 57 2f 79 78 47 34 45 31 2f 4b 50 4f 73 6c 52 4b 52 34 32 62 4d 6d 41 2b 7a 78 74 71 63 44 4c 70 46 64 4b 75 65 59 6a 48 74 4c 53 30 37 43 48 6f 56 43 54 52 43 30 48 4c 36 50 0a 65 52 32 70 59 46 6e 68 43 7a 4f 50 57 42 2f 69 66 61 35 35 30 44 4b 6c 35 57 5a 51 4c 61 4a 75 62 76 45 74 57 33 4b 6a 58 36 30 6b 52 51 54 70 65 42 4f 6c 4f 68 37 2f 6a 51 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 65 43 35 73 2f 49 33 6c 6b 72 42 31 [TRUNCATED] Data Ascii: router Quetzalcoatl 45.141.215.17 9000 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAdthlPu3ITFNc3/nF/ou6G+ixSXCLntcy2QB24gcTDXeAQAgBAB4Lmz8jeWSsHW/yxG4E1/KPOslRKR42bMmA+zxtqcDLpFdKueYjHtLS07CHoVCTRC0HL6PeR2pYFnhCzOPWB/ifa550DKl5WZQLaJubvEtW3KjX60kRQTpeBOlOh7/jQ4=-----END ED25519 CERT-----master-key-ed25519 eC5s/I3lkrB1v8sRuBNfyjzrJUSkeNmzJgPs8banAy4or-address [2a12:a800:2:1:45:141:215:17]:9000platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 08:34:11fingerprint D54D B93A 10CE 45B3 27CE 6CFE 6717 A559 CCBE F650uptime 360019bandwidth 1073741824 1073741824 6909952extra-info-digest 21FAB695161311C9C3E88A33682F21AD7BF245F0 dsVetYMlQprSKkeIikyV5Qpx9De90UY1Rj2vtrZgOA8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOoKrIA9s/PRJLnsqirfk9XjTfxONw7wxZe3/6sHr7EbMRNQUfOJKHIzIn7zxhcLB8rCowBfH716i+yRze6df3RqCHAbLTDBJO7UA0tJMaVnkEsr8sOa31Mj [TRUNCATED]
Nov 3, 2024 09:42:48.896344900 CET	1236	IN	Data Raw: 76 37 4e 6b 4e 58 34 5a 41 7a 49 4c 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 Data Ascii: v7NkNX4ZAzILAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMBMxHZ6mgV4rHvhhEy1IggNms3kgqco7BqJalOuEUIan6YeBbIpfaUNIJ5TEr7aaOIo+RRFIK+SKLMz373fhdrf/hJ4AEPtqBom2qCYz2zRmjUnwMhsVTf+A8u5NI6Nr7t9S8b0caa7
Nov 3, 2024 09:42:48.896356106 CET	1236	IN	Data Raw: 31 38 30 33 33 41 32 32 38 32 37 45 33 43 34 36 20 24 30 41 37 36 43 30 41 30 41 37 32 31 44 44 42 43 33 32 34 42 37 30 35 41 44 42 46 43 39 35 46 44 38 30 36 41 45 38 35 35 20 24 30 41 46 39 38 32 43 43 37 31 41 30 31 44 39 35 45 38 39 35 39 44 Data Ascii: 18033A22827E3C46 $0A76C0A0A721DDBC324B705ADBFC95FD806AE855 $0AF982CC71A01D95E8959D763D0EC0E5A6C61244 $0B5BC76B3BE7553B229FD3E73F26AED41C31DD19 $0B8EF5F5016926F4245350FB37914E30BF36C528 $0CD666F9C9A40A8CFB1E6B9465597A51D3A1CBF8 $0CF48696F004482
Nov 3, 2024 09:42:48.896378040 CET	1236	IN	Data Raw: 32 37 44 44 42 39 30 34 44 36 34 39 45 37 41 35 32 36 30 38 38 42 37 45 31 35 42 42 34 32 43 35 33 42 42 35 33 46 36 30 20 24 32 37 46 41 45 39 39 43 30 44 42 41 38 43 44 39 44 42 46 45 34 32 44 32 44 32 34 36 34 42 34 43 36 38 45 45 42 30 30 44 Data Ascii: 27DDB904D649E7A526088B7E15BB42C53BB53F60 $27FAE99C0DBA8CD9DBFE42D2D2464B4C68EEB00D $28E427C3E7FEB76C58901DCF1565EA44589E437C $2979E1F476F04311E5088B5C12554E8B318F8A7B $2A7FE76900BB03DEAD983EB149BC8FB2F48B137F $2B7F152EAFEF8B99ABF42FBE2ED4682F5
Nov 3, 2024 09:42:48.896389961 CET	1236	IN	Data Raw: 32 41 31 41 38 32 37 36 39 34 46 32 30 30 33 41 44 30 39 34 42 30 20 24 33 39 32 42 45 46 44 43 42 30 32 36 41 35 36 38 45 30 37 37 37 38 36 45 37 39 46 44 45 35 38 39 41 39 43 30 45 34 35 31 20 24 33 39 33 43 33 44 42 32 45 46 38 31 43 34 36 39 Data Ascii: 2A1A827694F2003AD094B0 $392BEFDCB026A568E077786E79FDE589A9C0E451 $393C3DB2EF81C469CC80A982CC31570423829099 $39CE03A66016B0D69BC6C2A1F362C628436FEF7B $3A282FE698A04D83511D526A525F2C45896454AC $3A72AE52214E2F60182D311CF68B2AC7E1E849B0 $3AD0E099E
Nov 3, 2024 09:42:48.896433115 CET	1236	IN	Data Raw: 45 43 41 34 20 24 34 43 45 34 32 32 34 34 36 44 34 33 42 30 41 32 31 46 30 46 39 43 41 31 34 36 44 39 30 37 35 35 38 33 34 30 32 31 30 32 20 24 34 43 45 36 30 38 42 31 31 44 44 41 33 36 36 35 44 41 35 31 41 39 34 35 33 32 46 45 45 38 32 42 39 43 Data Ascii: ECA4 $4CE422446D43B0A21F0F9CA146D9075583402102 $4CE608B11DDA3665DA51A94532FEE82B9C2EC359 $4EFF3D0C9DE539CF1E27BFC5B3E23BC7CB2D41A9 $4FE78C2FF1468CCF2193E33E2E79066862D52AEC $506B473E673E38EA9FECB7A5A73DD1E1FC37B555 $51691C7926B134AB582F3489D23
Nov 3, 2024 09:42:48.896445036 CET	1236	IN	Data Raw: 35 36 31 43 39 32 46 45 41 41 30 34 32 37 46 33 41 46 30 37 32 39 36 43 45 39 45 30 20 24 35 46 34 36 44 44 41 41 46 43 43 42 43 39 45 46 37 35 30 33 33 36 35 36 30 38 45 46 31 43 36 41 34 39 44 43 35 32 35 30 20 24 35 46 38 41 43 44 39 44 36 36 Data Ascii: 561C92FEAA0427F3AF07296CE9E0 $5F46DDAAFCCBC9EF7503365608EF1C6A49DC5250 $5F8ACD9D6624450926AB0BEDB7DDE9AE43B0D04C $601021EEAF3207505D67DEB77F40A9914A9B8856 $603CE0404FEB3BD363225C56FE429913E540E5FC $6052B7DC00F4E86B760350151665510BB9AE4C03 $60E
Nov 3, 2024 09:42:48.896456003 CET	1236	IN	Data Raw: 30 39 37 33 45 45 31 30 44 38 20 24 37 32 30 43 35 35 30 44 35 38 46 41 33 43 39 46 43 43 35 34 39 30 33 36 31 34 34 34 38 32 37 32 31 36 36 38 37 37 41 41 20 24 37 32 38 41 45 44 42 32 44 41 30 33 37 44 39 30 33 32 46 39 36 39 37 46 46 41 37 44 Data Ascii: 0973EE10D8 $720C550D58FA3C9FCC54903614448272166877AA $728AEDB2DA037D9032F9697FFA7D9E070783A1F6 $729EBA5E71606D7E870887473384BC803D6A4774 $72AA4CF891689332D9473A4E0140F83DB2210548 $73856192EE21DFFC37F6951861FB1959679A5558 $7413675ED252B2939556E
Nov 3, 2024 09:42:48.896472931 CET	1236	IN	Data Raw: 42 34 38 31 42 41 33 39 41 36 30 43 32 39 45 34 39 41 46 41 44 35 43 45 35 35 32 33 36 37 37 38 31 32 20 24 38 37 36 38 36 44 31 34 39 33 31 35 34 35 38 44 44 35 34 41 46 34 43 34 33 39 32 35 44 39 34 43 46 32 43 42 41 45 37 32 20 24 38 39 45 31 Data Ascii: B481BA39A60C29E49AFAD5CE5523677812 $87686D149315458DD54AF4C43925D94CF2CBAE72 $89E1B5DA0C2CDFFE066520FA852448EE0C4F3562 $8A02B09998F74FFE287CB928937E070CA57F1854 $8A522F30A3CEA7C692A0418C936232BA2E54F8B3 $8AB766FB1BE54669559B82165964B8D79DA8011
Nov 3, 2024 09:42:48.896485090 CET	1236	IN	Data Raw: 31 33 32 31 31 45 35 44 35 37 36 41 34 34 44 39 20 24 39 37 37 45 37 42 45 41 42 33 38 32 42 44 39 45 31 32 43 36 45 30 42 38 42 41 31 35 45 33 38 36 42 31 35 42 43 37 46 35 20 24 39 37 44 38 30 39 44 46 34 30 41 35 42 34 31 30 32 46 32 43 34 39 Data Ascii: 13211E5D576A44D9 $977E7BEAB382BD9E12C6E0B8BA15E386B15BC7F5 $97D809DF40A5B4102F2C4956A7DB7E709B611832 $982F261EC5D2D7DB89D7D0320009E02E752DFE69 $98AE10E67739CCC9FAD8B223236BBB080C3B0852 $99B6E09CF6084DB3A0D77BC0CFB1C6FC3B65A341 $9A11E4B46DC53E1
Nov 3, 2024 09:42:48.901340961 CET	1224	IN	Data Raw: 42 30 46 35 41 36 46 39 42 44 45 32 31 41 45 44 42 39 32 41 45 45 41 35 42 43 39 44 30 32 31 43 42 39 36 42 37 44 43 38 20 24 42 31 44 39 30 33 38 42 39 44 34 45 35 36 44 31 41 43 35 43 46 45 32 44 33 42 35 46 45 34 41 32 45 41 30 30 36 42 43 36 Data Ascii: B0F5A6F9BDE21AEDB92AEEA5BC9D021CB96B7DC8 $B1D9038B9D4E56D1AC5CFE2D3B5FE4A2EA006BC6 $B252D9474D8B36FC1299F6DB29C853D68900C394 $B274599CD37F4D5B2C407DC81E478135F3297EFE $B2A4EFD1B3DAD0F5FA127B5C29BBFE625628A6D9 $B4525FBE2F01B4CB2C6435DB5159C8ADE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	50036	45.66.35.11	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:50.469929934 CET	289	OUT	GET /tor/server/fp/090b83ba95a7e2d615d6799efd757de2ddc7d0fe HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:51.528904915 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:51 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:51 GMT Data Raw: 72 6f 75 74 65 72 20 62 68 73 64 7a 74 6f 72 72 6c 30 32 20 35 34 2e 33 39 2e 32 33 34 2e 39 31 20 39 30 30 32 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 5a 65 41 59 38 39 38 52 4e 51 4c 46 2f 56 4c 71 6e 2b 76 58 65 74 6d 52 4b 58 51 37 6b 70 33 74 6f 42 39 6c 36 50 38 68 30 4a 6e 66 71 75 41 51 41 67 42 41 43 52 31 41 2f 4d 0a 57 4d 4c 61 63 72 6e 56 52 74 31 51 32 6e 47 30 73 67 47 63 57 71 4b 6a 6e 35 2b 47 69 56 38 78 30 45 36 63 65 33 64 45 59 4f 36 53 62 48 71 77 33 4b 31 41 78 43 72 53 77 33 56 4f 70 74 74 6b 0a 6d 4f 63 71 4e 48 4e 75 39 43 5a 68 74 4a 67 69 67 61 49 58 6f 4a 69 4c 34 56 56 37 4d 64 65 54 30 6a 49 31 4a 63 6e 49 6c 55 46 4f 74 6c 37 74 2f 71 47 58 4f 69 56 2b 70 41 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6b 64 51 50 7a 46 6a 43 32 6e 4b 35 31 [TRUNCATED] Data Ascii: router bhsdztorrl02 54.39.234.91 9002 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1ZeAY898RNQLF/VLqn+vXetmRKXQ7kp3toB9l6P8h0JnfquAQAgBACR1A/MWMLacrnVRt1Q2nG0sgGcWqKjn5+GiV8x0E6ce3dEYO6SbHqw3K1AxCrSw3VOpttkmOcqNHNu9CZhtJgigaIXoJiL4VV7MdeT0jI1JcnIlUFOtl7t/qGXOiV+pAg=-----END ED25519 CERT-----master-key-ed25519 kdQPzFjC2nK51UbdUNpxtLIBnFqio5+fholfMdBOnHsplatform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 23:59:14fingerprint 090B 83BA 95A7 E2D6 15D6 799E FD75 7DE2 DDC7 D0FEuptime 129665bandwidth 41943040 52428800 16432128extra-info-digest 74EC88ECF24F963BDB5CEDFEF3B04BD331F1784F XeZdtcJcMavRlLSjBRoNaF1ip/qfyrv/CCXoEM90shAonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALtktlfByfzlgxi8rsDfGBN7kQsWYOBt4zEloiyr45C2XLorQ6QDHqMZK4SbwFMmlvXmPI3Bbyygf08d/lxxhEk9u1/8xiR92Lp84g453L3RRmsH2wDzF22I/b2ws7HsWbLIuZxr1CIVvKpK0l5m9EAzpXlZUDQCNGZJQmmp2e [TRUNCATED]
Nov 3, 2024 09:42:51.528920889 CET	1236	IN	Data Raw: 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 34 4b 47 77 43 55 61 75 33 6e 62 73 2b 34 74 55 35 62 41 74 67 6f 6a 73 6b 2f 4b 69 51 Data Ascii: signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK4KGwCUau3nbs+4tU5bAtgojsk/KiQtmnfoDbaMrnSDOsdLvtHFrIaBWd2kZn4+aEuwVyRWz8QggfFw2DxY7PqrfhkwFCGPF19rs/sV+1+eHYkBHWiCngYDE+7z2vfz1jpOGjlYZRFzXjJqbQY2iIELruVSNBSoX2hqCKpGIby9AgMBAAE=-----END
Nov 3, 2024 09:42:51.528929949 CET	166	IN	Data Raw: 6e 76 4e 42 4a 2f 4d 2f 44 61 38 62 46 49 6b 52 45 4c 56 6c 4c 46 72 39 2b 79 55 69 73 4c 75 0a 63 47 67 37 4d 44 46 74 68 4f 4b 34 6c 2f 4a 45 6f 43 6e 36 2b 4f 4a 55 63 79 65 6a 63 63 64 4b 68 51 55 69 77 46 74 55 38 2b 61 53 45 74 4f 71 56 4e Data Ascii: nvNBJ/M/Da8bFIkRELVlLFr9+yUisLucGg7MDFthOK4l/JEoCn6+OJUcyejccdKhQUiwFtU8+aSEtOqVN/pNIP/1TXgywj/OpJJPQFG85bOQIWPMYBLX2z/Sf/nSiMSBLUEX1KMmFo=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	50044	193.23.244.244	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:51.920165062 CET	292	OUT	GET /tor/server/fp/21c0c9ca51337a8593a0ef521121d4abb4deb662 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	50045	45.66.35.11	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:52.975053072 CET	289	OUT	GET /tor/server/fp/21c0c9ca51337a8593a0ef521121d4abb4deb662 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	50046	45.66.35.11	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:54.040664911 CET	289	OUT	GET /tor/server/fp/21c0c9ca51337a8593a0ef521121d4abb4deb662 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:55.094543934 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:54 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:54 GMT Data Raw: 72 6f 75 74 65 72 20 69 77 6f 72 6b 62 65 64 65 72 64 72 75 6e 6b 20 32 30 34 2e 31 33 37 2e 31 34 2e 31 30 34 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 63 48 41 66 59 78 68 2b 65 36 75 43 35 75 54 31 56 59 4a 4f 56 44 78 50 30 36 61 4f 6d 6f 35 2f 35 6c 39 5a 32 37 58 66 37 74 4c 63 32 42 41 51 41 67 42 41 43 77 4a 31 5a 79 0a 36 43 4a 59 77 74 46 37 4d 49 75 4c 71 73 52 2b 36 55 4b 73 71 38 46 71 71 59 47 77 35 38 4a 34 6f 2f 51 56 56 77 51 68 6e 64 65 6d 6b 45 46 4e 52 51 34 78 56 74 34 44 71 78 59 35 41 35 43 31 0a 79 66 56 59 48 57 37 32 2b 76 70 35 33 4b 6a 46 6f 49 30 45 4b 37 69 39 2f 32 6f 7a 73 55 67 63 4f 61 65 56 75 55 59 50 37 39 39 43 2b 78 57 76 53 73 6e 74 4b 73 37 46 63 67 6f 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 73 43 64 57 63 75 67 69 57 [TRUNCATED] Data Ascii: router iworkbederdrunk 204.137.14.104 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1cHAfYxh+e6uC5uT1VYJOVDxP06aOmo5/5l9Z27Xf7tLc2BAQAgBACwJ1Zy6CJYwtF7MIuLqsR+6UKsq8FqqYGw58J4o/QVVwQhndemkEFNRQ4xVt4DqxY5A5C1yfVYHW72+vp53KjFoI0EK7i9/2ozsUgcOaeVuUYP799C+xWvSsntKs7Fcgo=-----END ED25519 CERT-----master-key-ed25519 sCdWcugiWMLRezCLi6rEfulCrKvBaqmBsOfCeKP0FVcplatform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 02:45:35fingerprint 21C0 C9CA 5133 7A85 93A0 EF52 1121 D4AB B4DE B662uptime 11707397bandwidth 12697600 25395200 14985578extra-info-digest 06C0194C51CAFD54ACD22F1405E35CA6B6DB3ED2 QdP24W/FeRd/8t5a/hdh56mOyKtewmhceZhTxw0hrjEonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAO2X6Ln3BkFsBf0nCqJyXCzx9EYgcODuW7IoeHJmcXyN4u32vi0aVF39tRj4HToqNbxs6Jyt/dt/YR68pmSNWfAKMDdMIcThPLoqPBWGWBexbima/oH9YLcbl84D3iItTcUYLM6UwpX0n+iVTdXDbbCHQj00xUH0FlJR [TRUNCATED]
Nov 3, 2024 09:42:55.094588995 CET	1236	IN	Data Raw: 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 75 67 42 71 78 4e 46 41 4f 39 64 4d 42 30 65 70 30 32 4f 38 65 6c 58 Data Ascii: -----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMugBqxNFAO9dMB0ep02O8elXVC4dkrKktgZWyoq8I1oRauIkJ/+Oc6oY3l485ljExvots52ciTf4ef6t1H+HAz++/Sc0LUcqgf3S3yuYzPmuEOvBOkrLVD95uJuFJcX23TmgkYVYSuy15XdnUFjTeB3r2emUTUtBkcz9IDGbe2tAgMBAAE=---
Nov 3, 2024 09:42:55.094602108 CET	1236	IN	Data Raw: 74 20 31 37 32 2e 31 36 2e 30 2e 30 2f 31 32 3a 2a 0a 72 65 6a 65 63 74 20 32 30 34 2e 31 33 37 2e 31 34 2e 31 30 34 3a 2a 0a 61 63 63 65 70 74 20 2a 3a 32 30 2d 32 31 0a 61 63 63 65 70 74 20 2a 3a 32 32 0a 61 63 63 65 70 74 20 2a 3a 32 33 0a 61 Data Ascii: t 172.16.0.0/12:reject 204.137.14.104:accept :20-21accept :22accept :23accept :43accept :53accept :79accept :80-81accept :88accept :110accept :143accept :194accept :220accept :389accept :443accept :464accept
Nov 3, 2024 09:42:55.094613075 CET	282	IN	Data Raw: 31 58 68 69 7a 41 63 31 65 65 62 7a 78 52 77 59 48 50 48 6e 6e 30 6e 48 44 37 50 59 42 30 52 54 69 62 6a 52 2f 42 41 0a 72 6f 75 74 65 72 2d 73 69 67 6e 61 74 75 72 65 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 53 49 47 4e 41 54 55 52 45 2d 2d 2d 2d 2d Data Ascii: 1XhizAc1eebzxRwYHPHnn0nHD7PYB0RTibjR/BArouter-signature-----BEGIN SIGNATURE-----V5+AYqYHdIcwAxwo/NnSnPAfYXKiKsKBurlk1PrKYCpGM9hvXhHefW9qmFsas0D03OUJ1lAggyunlLtx7iOP+BGnKVgEm5kWFArBMIDPmYPjszymJPIwpfMg7CfO2N9k4Cl8Br4t0EXGfowE5Hk3qlu7CXhGmV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	50048	193.23.244.244	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:03.903832912 CET	292	OUT	GET /tor/server/fp/396e6841f8450131b6b76544e38cea61187a1558 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	50049	193.23.244.244	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:04.975573063 CET	292	OUT	GET /tor/server/fp/396e6841f8450131b6b76544e38cea61187a1558 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	50050	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:06.052680016 CET	292	OUT	GET /tor/server/fp/396e6841f8450131b6b76544e38cea61187a1558 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	50052	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:08.582976103 CET	292	OUT	GET /tor/server/fp/45a2b5b65152a9876e1a9a74957848518d38fed1 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	50053	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:09.355093002 CET	292	OUT	GET /tor/server/fp/45a2b5b65152a9876e1a9a74957848518d38fed1 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:10.114623070 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:10 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:10 GMT Data Raw: 72 6f 75 74 65 72 20 70 72 73 76 20 35 37 2e 31 32 38 2e 32 32 30 2e 31 38 35 20 39 31 30 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 31 73 41 53 2b 30 67 72 78 75 2b 4a 50 36 53 56 72 74 58 37 71 46 50 51 65 31 70 78 4e 62 79 4b 37 68 73 49 4a 76 79 7a 66 70 6c 39 62 71 41 51 41 67 42 41 42 64 77 75 7a 33 0a 43 66 6e 30 56 6a 30 76 77 4b 30 4b 6d 75 6c 68 35 4b 57 45 57 55 78 43 76 57 78 4f 66 4e 78 67 5a 76 4f 43 74 45 32 72 32 79 78 4a 66 53 61 55 77 46 55 59 68 59 79 45 72 4c 59 62 32 55 6c 75 0a 48 67 66 4f 36 6f 55 73 42 50 32 63 30 67 36 5a 4c 4b 76 58 41 63 43 47 35 61 53 45 63 41 31 37 4a 48 4a 5a 6b 4d 46 2b 6f 32 63 63 54 4d 35 50 4a 69 30 43 34 6f 36 31 41 67 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 58 63 4c 73 39 77 6e 35 39 46 59 39 4c 38 43 74 43 70 72 [TRUNCATED] Data Ascii: router prsv 57.128.220.185 9100 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB11sAS+0grxu+JP6SVrtX7qFPQe1pxNbyK7hsIJvyzfpl9bqAQAgBABdwuz3Cfn0Vj0vwK0Kmulh5KWEWUxCvWxOfNxgZvOCtE2r2yxJfSaUwFUYhYyErLYb2UluHgfO6oUsBP2c0g6ZLKvXAcCG5aSEcA17JHJZkMF+o2ccTM5PJi0C4o61Agk=-----END ED25519 CERT-----master-key-ed25519 XcLs9wn59FY9L8CtCprpYeSlhFlMQr1sTnzcYGbzgrQplatform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 03:37:54fingerprint 45A2 B5B6 5152 A987 6E1A 9A74 9578 4851 8D38 FED1uptime 2bandwidth 1073741824 1073741824 13920256extra-info-digest 89A0C3FF88F2BCC63186E5D7F8F59D5EF36BF048 1wM/T0ut/VZT5IlGxGXwyX8H3VJ+nr37037UfTnrdBIonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALt2LOA+5jmLNcWk5yiWRpPiEXfzMprPqpUiX6/GgCxS6W3OLQbm4VEE2YkGAsXvYrrYPeqXFT7AAhzZodGC7IEN41whjjA1f3fdGwnwbcL1wraX40wppiqzziVcJyILnwXotbNiVMomukcKSajnJuBceDjjbLXXsDSySKF9DvSDAgMBA [TRUNCATED]
Nov 3, 2024 09:43:10.114648104 CET	212	IN	Data Raw: 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 4e 70 5a 53 50 47 45 4e 48 4d 6f 52 48 48 6f 79 56 44 63 62 57 6a 35 35 34 55 34 6d 73 6a 79 32 59 58 50 68 Data Ascii: -key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALNpZSPGENHMoRHHoyVDcbWj554U4msjy2YXPhv1CyvOPItOt6L0CQtX3eq+86WoKF9BN6XQRNcs2I5B7LZE1XCLMstQFRwY8jxsX5czTjaIJrdZBrDdNwaYaE2CDnNKdJILfP4WwZH6SnkjtFirVESoZvWBD9l3yGs2tR
Nov 3, 2024 09:43:10.114656925 CET	1236	IN	Data Raw: 76 51 77 75 4e 4e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 6f 6e 69 6f 6e 2d 6b 65 79 2d 63 72 6f 73 73 63 65 72 74 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 43 52 4f 53 53 43 45 Data Ascii: vQwuNNAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----XPfbhWOwA1sH/sapYPAZByOmvQlKyKbVUZHZdbU8Akv/JSmz1jpa6pf9kvMq0tvsh7ZI25eQibHPEpSE9og8SH7E04DUypUXfiAlCox2shE6k+XPOX3o6WM1Yfvp0g6wU3CM+Ytz/6K8Lo9jkKJGxwK
Nov 3, 2024 09:43:10.114708900 CET	1236	IN	Data Raw: 24 31 33 39 31 34 45 45 43 35 42 43 46 32 34 35 44 37 31 37 41 34 45 30 37 31 45 31 36 34 41 34 44 41 42 35 34 37 35 39 34 20 24 31 38 42 38 38 44 34 41 35 39 37 35 43 33 36 42 36 43 41 35 46 35 39 46 46 32 31 36 37 43 39 32 37 41 31 41 43 30 32 Data Ascii: $13914EEC5BCF245D717A4E071E164A4DAB547594 $18B88D4A5975C36B6CA5F59FF2167C927A1AC02E $1B0433881C18CD09A27A904F96938A0E619FE620 $1B0669EDDE44DEF25446BCBFB9A9F3A62A23F399 $1B0AAE2012DB8E364A42739906249E1E8959A216 $1BF79AA4CF170310E389AD3299997BA1
Nov 3, 2024 09:43:10.114718914 CET	1236	IN	Data Raw: 43 44 45 45 45 46 38 42 38 35 45 35 31 34 34 38 31 39 33 35 35 36 33 20 24 33 36 33 37 46 45 37 46 45 37 45 30 41 37 33 32 43 43 31 45 31 42 44 37 44 44 43 36 44 36 35 43 33 30 42 46 34 45 45 43 20 24 33 37 41 35 38 33 39 46 45 38 46 42 41 46 41 Data Ascii: CDEEEF8B85E514481935563 $3637FE7FE7E0A732CC1E1BD7DDC6D65C30BF4EEC $37A5839FE8FBAFA711D90C9CBCF57FE9DE20FB6B $38A22A36699A3946A3CB5A60762C26156BE2E2DD $39806EEF1F97D6157B0BAFAE8125CB315E9B661F $3A26E4F998C97B7DE2A8F624CDE69A7637EC2586 $3E1EAC55
Nov 3, 2024 09:43:10.114737034 CET	1236	IN	Data Raw: 34 44 44 45 43 20 24 36 32 33 43 43 46 42 39 37 39 36 33 30 45 37 33 37 34 38 37 30 44 33 35 44 30 37 35 44 31 32 44 43 41 43 45 46 34 35 44 20 24 36 32 36 44 34 46 32 44 36 45 32 32 46 36 35 38 41 41 37 43 32 43 45 41 31 44 34 43 37 39 34 43 33 Data Ascii: 4DDEC $623CCFB979630E7374870D35D075D12DCACEF45D $626D4F2D6E22F658AA7C2CEA1D4C794C3590DD63 $63EF4324913C0768A75DB0595A96A63087AE62F4 $667BD196E39C299B31675AB6D82787CAE2CB8723 $67192F3D2363671B783F2A8E8810D4D88245C36D $6956396DBFD48738B428E5C2C8
Nov 3, 2024 09:43:10.114757061 CET	1236	IN	Data Raw: 38 31 45 34 34 42 36 37 42 41 44 42 46 46 46 30 30 44 41 38 30 43 44 44 34 41 46 42 35 20 24 38 41 44 31 34 31 36 38 30 37 38 41 45 44 39 34 39 30 31 34 30 36 33 33 46 37 31 38 36 37 36 37 30 45 43 43 45 31 45 36 20 24 38 42 35 45 30 36 39 32 30 Data Ascii: 81E44B67BADBFFF00DA80CDD4AFB5 $8AD14168078AED9490140633F71867670ECCE1E6 $8B5E06920FC722CD33022AEEAF4D103CF60D65BC $8CEE63E1466AFDED01DC6817A00B50478280865E $8D24AB1296F21F151A572C06562626E6A854C15C $8E8BCD08051D2BA5CAE43514F0695B5F8AE05227 $8F
Nov 3, 2024 09:43:10.114768982 CET	164	IN	Data Raw: 46 30 33 36 36 45 35 46 34 44 44 20 24 41 41 39 45 32 31 36 34 45 34 36 36 46 43 41 37 31 32 39 43 36 46 37 31 32 38 39 33 31 43 44 35 35 41 39 32 45 45 36 44 20 24 41 42 37 38 37 42 30 34 34 33 43 34 45 36 37 31 34 43 43 41 42 42 39 34 36 44 32 Data Ascii: F0366E5F4DD $AA9E2164E466FCA7129C6F7128931CD55A92EE6D $AB787B0443C4E6714CCABB946D20B4347B33A17A $ACE0F85A669F97384537928BE349A9EE782367DA $ADA78566F6B7D2CC128775D46
Nov 3, 2024 09:43:10.114778042 CET	1236	IN	Data Raw: 38 45 45 31 37 32 46 34 46 42 39 31 44 33 35 20 24 41 44 45 37 33 30 32 45 33 38 46 31 34 30 34 34 45 34 36 30 41 38 32 45 36 34 42 35 46 45 45 31 34 35 39 42 45 43 33 37 20 24 41 45 42 30 41 30 39 42 45 33 45 44 38 38 41 36 38 44 43 32 32 41 43 Data Ascii: 8EE172F4FB91D35 $ADE7302E38F14044E460A82E64B5FEE1459BEC37 $AEB0A09BE3ED88A68DC22ACA02147CDB4FC50BDD $AF90C647D5AE15BD1D8ED81845D49E2F4F181884 $B1AC85CD3FDFF038B89BA11F997A09A9039AC081 $B314B9C88C8BFE9261136B075FD8DED9186E76CE $B3F5A9EB0B0B5087
Nov 3, 2024 09:43:10.114789009 CET	212	IN	Data Raw: 37 30 46 36 37 37 45 35 34 46 41 32 33 33 37 42 46 30 33 34 33 46 39 46 46 42 35 32 35 36 31 33 34 43 30 45 34 33 46 20 24 44 37 32 34 37 39 42 32 34 42 32 30 30 35 31 31 39 30 35 34 31 32 33 34 32 33 35 34 46 45 31 44 32 36 32 46 38 36 44 41 20 Data Ascii: 70F677E54FA2337BF0343F9FFB5256134C0E43F $D72479B24B200511905412342354FE1D262F86DA $D74EA68923AC3449DEA549F10A89E6B33A770A39 $DC0C5AFC57E949847418B859AE98499F622703E4 $E00B180CC359A7D8EDF21DF492D3B5C349B1D85C $E18
Nov 3, 2024 09:43:10.119590998 CET	1236	IN	Data Raw: 42 38 33 41 34 35 39 39 38 43 43 35 39 45 39 36 42 41 34 32 45 30 35 42 36 38 46 33 32 34 35 37 39 41 31 44 44 20 24 45 35 39 30 32 35 46 38 43 31 34 38 44 41 36 43 43 34 30 41 38 38 34 37 33 45 36 46 45 38 35 30 41 33 46 33 38 41 32 41 20 24 45 Data Ascii: B83A45998CC59E96BA42E05B68F324579A1DD $E59025F8C148DA6CC40A88473E6FE850A3F38A2A $E680D2E9D61D1624569BBF4C3068461E265A234B $E8A53F2E34651BA85A271440611B4F373A7F835B $E9EA6E75B3A541DDCF70E7A09BD3DB715C888D96 $E9F1C405585300BC196EA7E9C021B930773A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	50054	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:10.465199947 CET	292	OUT	GET /tor/server/fp/0e29222ca653ce4f94fdbf8df16d2597d473ec74 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:11.246620893 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:11 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:11 GMT Data Raw: 72 6f 75 74 65 72 20 6d 65 6e 74 6f 72 65 74 68 32 20 31 30 33 2e 32 35 31 2e 31 36 37 2e 32 30 20 39 30 30 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 66 38 41 51 31 57 52 4f 33 75 63 70 62 70 49 55 4c 5a 74 76 58 53 2b 33 65 75 6b 73 6f 49 57 79 69 79 46 38 4d 75 6d 50 77 61 53 54 47 64 41 51 41 67 42 41 42 63 77 70 30 62 0a 72 4b 56 4f 2b 36 32 75 6f 53 71 74 53 72 39 78 62 4a 69 69 37 2f 2b 44 36 54 4d 4b 62 4a 74 54 72 77 71 76 4b 4d 78 4f 79 55 75 58 39 51 53 56 5a 42 35 53 49 4e 2f 65 75 75 35 56 74 74 31 58 0a 57 6b 58 6b 2b 35 38 68 66 64 56 2b 32 54 62 73 65 47 6a 4b 46 6f 50 38 50 35 33 61 32 6a 59 56 37 50 35 38 5a 38 54 63 72 4b 33 31 6e 42 6c 42 6b 52 6f 65 30 62 6d 67 31 67 77 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 58 4d 4b 64 47 36 79 6c 54 76 75 74 72 [TRUNCATED] Data Ascii: router mentoreth2 103.251.167.20 9003 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1f8AQ1WRO3ucpbpIULZtvXS+3euksoIWyiyF8MumPwaSTGdAQAgBABcwp0brKVO+62uoSqtSr9xbJii7/+D6TMKbJtTrwqvKMxOyUuX9QSVZB5SIN/euu5Vtt1XWkXk+58hfdV+2TbseGjKFoP8P53a2jYV7P58Z8TcrK31nBlBkRoe0bmg1gw=-----END ED25519 CERT-----master-key-ed25519 XMKdG6ylTvutrqEqrUq/cWyYou//g+kzCmybU68Krygor-address [2a01:6340:2:501::20]:9003platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 07:32:35fingerprint 0E29 222C A653 CE4F 94FD BF8D F16D 2597 D473 EC74uptime 928567bandwidth 209715200 209715200 30242152extra-info-digest E3A5F17319967C4CF3DBD1767A66F3387959CCC4 9ipk9xnKMYp0OLs4ZuYjGDJBUEv7zUitVlan+6vMvfgonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKpM2x23jRwFFNd8yBVP5cFiZ/Q30wyXYnoGohlDpSiX+SdQbWO3+DvelaAo7/m0nDFchxlauCHFkw5k7D524nQfkZLufjAzW952yq8Dfh83mMtUoPi6+LHueuD06VCNmA [TRUNCATED]
Nov 3, 2024 09:43:11.246635914 CET	764	IN	Data Raw: 74 56 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d Data Ascii: tVAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALJdbWqFsHf7nDJTY57bqRYd4xKytog2Cx5OfB/6W8HiHO8BcoOSzafF3jhf7nxcTWpwA2cNiuX3DuajG9IU+0tEJcrsxJaK6+iNt5axNYJmmmbP63RQqeDCQf1XldhCEyUXKvi+c08ZHaAcsEqWLF
Nov 3, 2024 09:43:11.246741056 CET	1236	IN	Data Raw: 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 30 45 32 39 32 32 32 43 41 36 35 33 43 45 34 46 39 34 46 44 42 46 38 44 46 31 36 44 32 35 39 37 44 34 37 33 45 43 37 34 20 24 31 38 41 39 44 33 33 35 31 35 45 35 30 34 37 39 35 39 32 37 37 38 Data Ascii: CERT-----family $0E29222CA653CE4F94FDBF8DF16D2597D473EC74 $18A9D33515E504795927782AE723C234B979BD6A $30626238638AE65194814663A4651AFC04BC8D60 $43D29158118DC17C1F5C23941D4C3BA9DB582FFC $6DAD7AF818F4E1CDA7909DF2E4018A998BE21113 $A3093B729A57672
Nov 3, 2024 09:43:11.246819973 CET	1167	IN	Data Raw: 33 32 31 0a 61 63 63 65 70 74 20 2a 3a 34 36 34 33 0a 61 63 63 65 70 74 20 2a 3a 35 30 35 30 0a 61 63 63 65 70 74 20 2a 3a 35 31 39 30 0a 61 63 63 65 70 74 20 2a 3a 35 32 32 32 2d 35 32 32 33 0a 61 63 63 65 70 74 20 2a 3a 35 32 32 38 0a 61 63 63 Data Ascii: 321accept :4643accept :5050accept :5190accept :5222-5223accept :5228accept :5900accept :6660-6669accept :6679accept :6697accept :8000accept :8008accept :8074accept :8080accept :8082accept :8087-8088accept :8332-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	50056	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:12.501044989 CET	292	OUT	GET /tor/server/fp/9faa9ceedff11fd68ac0cf389054a64ba1f3b034 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	50057	45.66.35.11	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:12.504760027 CET	289	OUT	GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	50058	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:13.553731918 CET	292	OUT	GET /tor/server/fp/000f3eb75342be371f1d8d3fae90890aeb5664ee HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:14.317014933 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:14 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:14 GMT Data Raw: 72 6f 75 74 65 72 20 53 45 4e 44 4e 4f 4f 53 45 70 6c 7a 20 32 30 34 2e 31 33 37 2e 31 34 2e 31 30 36 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 62 30 41 54 72 50 43 71 44 68 6f 58 39 62 70 48 2b 38 48 41 61 51 55 68 68 72 36 5a 79 62 78 2f 67 47 52 30 75 4d 65 75 57 59 52 4d 2b 45 41 51 41 67 42 41 41 53 71 6f 59 67 0a 2b 71 4c 48 71 2b 35 45 51 36 74 65 65 2b 39 59 2f 63 73 63 65 73 65 57 6c 35 50 71 6d 35 48 66 7a 70 34 61 72 35 6f 46 76 77 6e 6a 5a 4c 42 6f 46 49 6f 4d 6b 78 71 65 78 2f 55 67 6c 33 43 5a 0a 55 56 64 77 4f 6f 32 31 6e 51 66 6a 73 44 35 42 65 63 4b 50 37 78 4f 43 73 38 45 6e 58 68 55 33 37 68 63 4e 76 38 6c 79 35 6b 67 4a 36 71 6f 44 78 58 77 51 63 64 47 31 79 51 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 45 71 71 47 49 50 71 69 78 36 76 75 [TRUNCATED] Data Ascii: router SENDNOOSEplz 204.137.14.106 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1b0ATrPCqDhoX9bpH+8HAaQUhhr6Zybx/gGR0uMeuWYRM+EAQAgBAASqoYg+qLHq+5EQ6tee+9Y/csceseWl5Pqm5Hfzp4ar5oFvwnjZLBoFIoMkxqex/Ugl3CZUVdwOo21nQfjsD5BecKP7xOCs8EnXhU37hcNv8ly5kgJ6qoDxXwQcdG1yQ4=-----END ED25519 CERT-----master-key-ed25519 EqqGIPqix6vuREOrXnvvWP3LHHrHlpeT6puR386eGq8platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 03:40:26fingerprint 000F 3EB7 5342 BE37 1F1D 8D3F AE90 890A EB56 64EEuptime 11711004bandwidth 12697600 25395200 14184770extra-info-digest A61DB07C14C53B0851DDB6A9C0F8591FD350560E ZEGxALe6B5mLvrlOw2SJkV4pJK8bFY7okJsyR3Z4BWQonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALQshzjbIodYG7n/zsUlkbJvlXBcZ1wxx9I4aZVgd63eaVg820TYHKdlRv2RK0BJdZFn9dQfsJmGJ8+xCqZ5EFh2JiuBVLFkXRmSasfUFSfuFsnfLXINYkBpoBypquwFHxKMNvGvrkn3Yhd7SZUqp9W/aVtaMikBI2KZO6k [TRUNCATED]
Nov 3, 2024 09:43:14.317032099 CET	1236	IN	Data Raw: 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 6d 78 38 56 56 4b 6f 7a 31 5a 32 39 6c 66 31 4c 70 61 4b 6c 68 61 65 35 72 38 Data Ascii: --signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKmx8VVKoz1Z29lf1LpaKlhae5r8kQixFfSR6wSCVEOpbpUJH2VWNg5ePizzO2PY98md7BIiUHLMLrTzldq9xVxhDZ+RYELc0QlT7fTYwFjWz9hwQqVpah/VtMIKgQ/E8xUDqSTCqx6Xibuc8JRlKDPj4uA+N+65G4ZClc+4BTUnAgMBAAE=-----E
Nov 3, 2024 09:43:14.317043066 CET	1236	IN	Data Raw: 37 32 2e 31 36 2e 30 2e 30 2f 31 32 3a 2a 0a 72 65 6a 65 63 74 20 32 30 34 2e 31 33 37 2e 31 34 2e 31 30 36 3a 2a 0a 61 63 63 65 70 74 20 2a 3a 32 30 2d 32 31 0a 61 63 63 65 70 74 20 2a 3a 32 32 0a 61 63 63 65 70 74 20 2a 3a 32 33 0a 61 63 63 65 Data Ascii: 72.16.0.0/12:reject 204.137.14.106:accept :20-21accept :22accept :23accept :43accept :53accept :79accept :80-81accept :88accept :110accept :143accept :194accept :220accept :389accept :443accept :464accept :46
Nov 3, 2024 09:43:14.317055941 CET	279	IN	Data Raw: 32 38 39 55 30 51 52 53 79 34 56 6c 4f 47 6d 62 46 4e 54 58 54 58 39 46 75 47 46 66 6d 79 31 42 5a 64 44 67 0a 72 6f 75 74 65 72 2d 73 69 67 6e 61 74 75 72 65 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 53 49 47 4e 41 54 55 52 45 2d 2d 2d 2d 2d 0a 67 75 Data Ascii: 289U0QRSy4VlOGmbFNTXTX9FuGFfmy1BZdDgrouter-signature-----BEGIN SIGNATURE-----guaD0TOWrGRuOIEcFTzUnZJu9qPK0SXLD1JVbX51CELFxpjKeRqknBvMxEg2qf1LqUKsy21Hy47llGq4GJcqRrBqlTQJddZFPr/NOOw8rRWHYl4Udp7WL4OTyolhiaQyQksd7qFUSGMBpupy0wCnhuMzzMfP4X8k5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	50059	216.218.219.41	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:13.570406914 CET	292	OUT	GET /tor/server/fp/9faa9ceedff11fd68ac0cf389054a64ba1f3b034 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	50060	216.218.219.41	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:14.353432894 CET	292	OUT	GET /tor/server/fp/9faa9ceedff11fd68ac0cf389054a64ba1f3b034 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	50062	45.66.35.11	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:15.889350891 CET	289	OUT	GET /tor/server/fp/001099d2200df4d6fb18bd3369e3e7b813dee71d HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:16.951165915 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:16 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:16 GMT Data Raw: 72 6f 75 74 65 72 20 53 69 6c 65 6e 74 57 68 69 73 70 65 72 20 31 35 34 2e 32 31 33 2e 31 38 34 2e 34 34 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 66 54 41 61 32 4c 38 6b 47 4c 6d 42 45 76 72 73 34 4c 55 6f 4d 37 67 39 4a 67 66 62 4f 6f 7a 62 51 48 79 69 66 52 63 49 49 48 4f 30 63 76 41 51 41 67 42 41 44 34 76 61 74 30 0a 46 30 63 46 55 67 4f 41 45 73 73 48 4b 50 2f 66 62 59 62 51 4e 56 78 68 34 61 31 59 68 78 41 50 6f 70 59 55 76 67 31 42 50 61 72 76 4b 42 36 48 7a 2f 41 4b 74 76 54 35 34 42 4f 48 39 45 78 52 0a 47 38 34 38 36 56 52 51 47 64 4b 48 56 39 55 78 50 4c 46 74 62 4d 63 4e 46 69 50 6e 69 6a 72 33 66 6b 41 38 33 52 73 56 75 6c 75 30 67 52 35 61 6e 6d 6e 37 64 32 30 50 30 67 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 2b 4c 32 72 64 42 64 48 42 56 [TRUNCATED] Data Ascii: router SilentWhisper 154.213.184.44 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1fTAa2L8kGLmBEvrs4LUoM7g9JgfbOozbQHyifRcIIHO0cvAQAgBAD4vat0F0cFUgOAEssHKP/fbYbQNVxh4a1YhxAPopYUvg1BParvKB6Hz/AKtvT54BOH9ExRG8486VRQGdKHV9UxPLFtbMcNFiPnijr3fkA83RsVulu0gR5anmn7d20P0gA=-----END ED25519 CERT-----master-key-ed25519 +L2rdBdHBVIDgBLLByj/322G0DVcYeGtWIcQD6KWFL4or-address [2a12:dd47:8513::11]:9001platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:28:41fingerprint 0010 99D2 200D F4D6 FB18 BD33 69E3 E7B8 13DE E71Duptime 734702bandwidth 1073741824 1073741824 13658488extra-info-digest BA054FD87160538FE9C02761A269A686DF84E470 amm9LP1S+fpYbeKE0GFOmg6gsC5ZyNYxnFbsK6qEkvIonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOgDk/wmDfNhQjUKJTwaeLRE5VC1L6NeRmfSJpQsv4zQM/Mthc9+kLiIf4NhZD/dvaozYo4ro6AgAZ6X211krrCUL0Asah4bZSw+lHMioGQ1coVSCIG0BHwkgLS0g0 [TRUNCATED]
Nov 3, 2024 09:43:16.951179028 CET	764	IN	Data Raw: 35 4b 6c 59 43 76 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d Data Ascii: 5KlYCvAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANDH5hml+/syWQLLwgz6wJCy5OQ2sWKNuYeN+mffNj5LGxPNlCzcOSscrthzUtb8Vv7FPiF+ULnxAsgXJC2Nw6cixX1TPp1PZZCVbbCBrtdnLYg6UjlaKx1+T9G/8VdNHFERTblY25N1XfH7aN
Nov 3, 2024 09:43:16.951189041 CET	1018	IN	Data Raw: 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 30 30 31 30 39 39 44 32 32 30 30 44 46 34 44 36 46 42 31 38 42 44 33 33 36 39 45 33 45 37 42 38 31 33 44 45 45 37 31 44 20 24 31 42 37 42 41 44 34 45 39 31 42 33 42 35 46 41 32 43 Data Ascii: 519 CERT-----family $001099D2200DF4D6FB18BD3369E3E7B813DEE71D $1B7BAD4E91B3B5FA2C59F9120E0D13E4C7403B93hidden-service-dircontact relays@@@fuppurge dot infontor-onion-key vP2IhxiAdApZLKSoL8y9WlDHir2jO18n9qjWuIS+pGkreject 0.0.0.0/8:*reject

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	50063	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:16.926409960 CET	292	OUT	GET /tor/server/fp/301081df6a56b542710e5a19c893da910abd3c2f HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	50064	45.66.35.11	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:17.987257004 CET	289	OUT	GET /tor/server/fp/301081df6a56b542710e5a19c893da910abd3c2f HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:19.026276112 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:18 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:18 GMT Data Raw: 72 6f 75 74 65 72 20 41 72 61 6d 69 73 20 34 35 2e 31 34 31 2e 32 31 35 2e 32 31 20 39 34 30 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 47 41 56 4a 38 63 6c 56 71 57 41 69 71 4b 45 79 57 6c 4c 7a 58 57 56 38 34 73 43 46 55 64 53 34 44 57 68 6f 73 70 2f 76 75 55 49 63 54 41 51 41 67 42 41 44 2f 4e 66 69 41 0a 64 4e 2f 59 2b 71 6d 71 30 78 46 55 69 6f 6d 51 50 48 59 53 63 70 4c 35 4f 61 6b 64 6c 73 71 66 72 6f 4a 6f 39 41 41 39 62 47 33 64 5a 44 71 52 55 4a 62 6f 46 6d 4f 77 70 74 62 56 55 4a 41 36 0a 65 43 5a 6c 59 4f 6c 67 4e 56 32 76 55 64 6f 4c 75 31 63 6a 6a 61 72 39 44 56 62 63 50 71 36 30 49 34 55 30 75 49 76 37 6b 7a 72 49 64 4a 42 65 52 64 52 63 74 46 32 68 34 51 30 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 2f 7a 58 34 67 48 54 66 32 50 71 70 71 74 4d 52 56 49 [TRUNCATED] Data Ascii: router Aramis 45.141.215.21 9400 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oGAVJ8clVqWAiqKEyWlLzXWV84sCFUdS4DWhosp/vuUIcTAQAgBAD/NfiAdN/Y+qmq0xFUiomQPHYScpL5OakdlsqfroJo9AA9bG3dZDqRUJboFmOwptbVUJA6eCZlYOlgNV2vUdoLu1cjjar9DVbcPq60I4U0uIv7kzrIdJBeRdRctF2h4Q0=-----END ED25519 CERT-----master-key-ed25519 /zX4gHTf2PqpqtMRVIqJkDx2EnKS+TmpHZbKn66CaPQor-address [2a12:a800:2:1:45:141:215:21]:9400platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 00:50:24fingerprint 3010 81DF 6A56 B542 710E 5A19 C893 DA91 0ABD 3C2Fuptime 64808bandwidth 1073741824 1073741824 12994560extra-info-digest E631C0B8121517FC1168328F0F3D0DC3AA7083B9 0tZ2/bUSLkiKl7Lc1cM+cNhMmaLZ7nrQ0D4PPxO40lMonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK4COxLjPZWnXD5eAwW/5TNiytVE8dTj1LUVpqsWxfpLd/peRzqtobYtHMnzB1zYwwXDZDYB7PvoqcaJtg1pg01DRd78sgGvNhU9V/X7Vm+2sZpNERW3/V3WaveO0N [TRUNCATED]
Nov 3, 2024 09:43:19.026288986 CET	1236	IN	Data Raw: 47 74 62 55 32 52 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d Data Ascii: GtbU2RAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMeT4btelnL3x4DYn1u4Bkq2rGlrJJzsxQp45YXVqMYzHASUCN4JXRjLfMS3bDxdFSn+hZDvFj+cgBqN9cnxhff48Z+wuZ8p5kjrB7/ogiTelSR+IhxeQ4E0JkWUHVcKbgxg+sDgEILsXUFu68
Nov 3, 2024 09:43:19.026295900 CET	1236	IN	Data Raw: 39 31 30 41 42 44 33 43 32 46 20 24 33 33 42 44 33 34 46 33 45 33 30 30 36 45 42 31 33 37 35 42 30 38 39 39 35 42 43 37 41 36 39 38 38 44 36 46 31 38 38 45 20 24 33 35 39 43 35 32 33 31 41 43 32 34 35 32 44 33 36 35 42 36 34 41 32 33 43 32 37 38 Data Ascii: 910ABD3C2F $33BD34F3E3006EB1375B08995BC7A6988D6F188E $359C5231AC2452D365B64A23C27817A1DFEE56B4 $410D5B5847C199DE15DE80741BDC0000A5A53C8F $445243EA9CFD0D4ACE35F060DDD41E6D8C745D5B $4C209C991956896A830890ED74A8AE1207EB8AF4 $4F9EFCF7689084E4C8EE9
Nov 3, 2024 09:43:19.026422024 CET	1236	IN	Data Raw: 37 46 43 32 41 30 36 30 46 41 32 30 30 35 31 35 33 37 45 36 37 33 38 42 33 45 44 35 42 39 38 34 36 33 20 24 42 35 41 36 35 42 39 39 37 43 38 39 38 35 38 33 46 39 43 34 43 41 31 36 46 45 36 30 33 42 37 33 34 37 43 38 39 35 38 38 20 24 42 36 41 35 Data Ascii: 7FC2A060FA20051537E6738B3ED5B98463 $B5A65B997C898583F9C4CA16FE603B7347C89588 $B6A5986F404B2C5EB604A37276C0CB7B24FB6631 $B80A837E7131B0CDF8FCE8A7224E713CECF1785E $BC5372E3766DDCC0985128790246F9588C140125 $C29FEF6A405E730DE07EC74CCF0623D95F0D3A4
Nov 3, 2024 09:43:19.026427984 CET	1236	IN	Data Raw: 34 33 0a 61 63 63 65 70 74 20 2a 3a 35 33 0a 61 63 63 65 70 74 20 2a 3a 37 39 2d 38 31 0a 61 63 63 65 70 74 20 2a 3a 31 39 34 0a 61 63 63 65 70 74 20 2a 3a 32 32 30 0a 61 63 63 65 70 74 20 2a 3a 33 38 39 0a 61 63 63 65 70 74 20 2a 3a 34 34 33 0a Data Ascii: 43accept :53accept :79-81accept :194accept :220accept :389accept :443accept :465accept :531accept :543-544accept :554accept :563accept :587accept :636accept :706accept :853accept :873accept :902-904accept :9
Nov 3, 2024 09:43:19.026434898 CET	423	IN	Data Raw: 34 33 2c 38 38 38 38 2c 39 34 31 38 2c 39 39 39 39 2d 31 30 30 30 30 2c 31 31 33 37 31 2c 31 39 32 39 34 2c 31 39 36 33 38 2c 35 30 30 30 32 2c 36 34 37 33 38 0a 74 75 6e 6e 65 6c 6c 65 64 2d 64 69 72 2d 73 65 72 76 65 72 0a 72 6f 75 74 65 72 2d Data Ascii: 43,8888,9418,9999-10000,11371,19294,19638,50002,64738tunnelled-dir-serverrouter-sig-ed25519 usgsfqa1JQC1lj98EOAdd79bvBu9mRuzP2T4Qv5QLlb7j6KSw5Wk+keagjcfoKnUCuZnDADiD2ZSL5o/8tyxAgrouter-signature-----BEGIN SIGNATURE-----xy3W+pQ3OzrkIHV5EOR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	50065	45.66.35.11	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:19.225728035 CET	289	OUT	GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	50066	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:19.519484997 CET	292	OUT	GET /tor/server/fp/74ad0c82407490b63aae2c1295102d8d58c4e257 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	50067	193.23.244.244	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:20.283778906 CET	292	OUT	GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	50068	216.218.219.41	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:20.592099905 CET	292	OUT	GET /tor/server/fp/74ad0c82407490b63aae2c1295102d8d58c4e257 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:21.365951061 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:21 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:21 GMT Data Raw: 72 6f 75 74 65 72 20 61 72 74 69 6b 65 6c 31 30 62 65 72 31 31 30 20 31 38 35 2e 32 32 30 2e 31 30 31 2e 32 38 20 39 30 30 32 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 58 6c 41 58 77 55 6e 30 48 2f 7a 4e 6d 79 46 62 74 5a 58 6d 61 4d 52 54 43 72 67 78 33 52 44 76 55 55 79 6b 6c 68 73 56 34 47 4b 64 66 73 41 51 41 67 42 41 43 58 69 32 6c 46 0a 6f 79 61 77 6c 2f 72 49 41 4f 47 68 73 62 57 4b 56 47 34 4f 70 31 63 32 74 71 49 31 2b 4e 74 6f 38 73 62 6f 61 6f 30 50 6a 57 43 75 34 4b 62 38 5a 39 30 32 45 4f 52 74 2b 77 42 65 69 71 45 55 0a 58 2b 2f 69 4d 4c 4c 6a 6a 56 6c 34 68 6e 64 4a 4f 32 73 48 66 47 76 39 79 62 77 55 6a 6a 55 49 33 2f 59 30 71 4e 52 4a 59 4d 6a 76 57 39 71 42 6d 42 79 51 31 67 79 35 69 41 4d 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6c 34 74 70 52 61 4d 6d [TRUNCATED] Data Ascii: router artikel10ber110 185.220.101.28 9002 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1XlAXwUn0H/zNmyFbtZXmaMRTCrgx3RDvUUyklhsV4GKdfsAQAgBACXi2lFoyawl/rIAOGhsbWKVG4Op1c2tqI1+Nto8sboao0PjWCu4Kb8Z902EORt+wBeiqEUX+/iMLLjjVl4hndJO2sHfGv9ybwUjjUI3/Y0qNRJYMjvW9qBmByQ1gy5iAM=-----END ED25519 CERT-----master-key-ed25519 l4tpRaMmsJf6yADhobG1ilRuDqdXNraiNfjbaPLG6Goor-address [2a0b:f4c2::28]:9002platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:32:55fingerprint 74AD 0C82 4074 90B6 3AAE 2C12 9510 2D8D 58C4 E257uptime 64807bandwidth 1073741824 1073741824 21309440extra-info-digest 1F69C6D75DBA73A72D6080EC3187B40AF2FA5AEB iF5RNTeaC1/lMBjoOPF9zlF+hSGFo5S7+nlynR6VDvoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOEzQeT8Bc2z7rq9l/HivIyg6L46ZPYMhoN9Oczmb7hxm2HseaMj6lMlrUDQRIfMMfG1oDs93JlI1A2XZk88oRbDu+FK++4+g8B/c33QTPnv5c7Xpz+ih8b6qcd4xtsBV1 [TRUNCATED]
Nov 3, 2024 09:43:21.365968943 CET	1236	IN	Data Raw: 2b 4c 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d Data Ascii: +LAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOR26nmszuIenJ2IJC7JusjEsUtoa1gp6Nx6hlKJ+loGQoZA8KxsR+P6FBkGD3ifa6Oh+vGHfAe43hEbCLR/EFt6d1tN39OsivF+EbMslUGNSyCKyklzjqzPkL56V+EbLe2I5sCQmu8XuC0ez7fePb
Nov 3, 2024 09:43:21.365981102 CET	424	IN	Data Raw: 37 34 43 33 44 46 20 24 31 36 38 41 32 46 44 39 36 44 42 35 38 43 41 45 32 37 36 42 42 38 33 31 37 38 45 37 34 39 37 31 37 42 33 31 44 39 43 34 20 24 31 37 42 31 45 46 38 35 31 30 35 38 45 31 34 32 33 33 45 43 44 39 45 35 39 32 32 46 46 36 33 31 Data Ascii: 74C3DF $168A2FD96DB58CAE276BB83178E749717B31D9C4 $17B1EF851058E14233ECD9E5922FF6316834FDA6 $19CCB7D946802677768364E2984A998E78956DB9 $1B18F98534634EF4EB4B36523F052F4D829E0496 $1DC1A8B7A5F9E67BF75A144E496203F87E2EBC27 $1FF2AE9C9BD4A0C129582D62C
Nov 3, 2024 09:43:21.366012096 CET	1236	IN	Data Raw: 30 46 20 24 32 44 32 41 38 37 35 36 42 43 43 37 36 31 39 43 46 39 35 38 36 39 30 32 46 31 36 31 30 44 32 44 34 30 44 36 37 34 36 41 20 24 32 45 37 45 46 43 46 39 42 42 45 33 38 32 31 31 44 43 39 30 42 42 42 39 46 33 32 46 42 45 46 36 31 32 41 43 Data Ascii: 0F $2D2A8756BCC7619CF9586902F1610D2D40D6746A $2E7EFCF9BBE38211DC90BBB9F32FBEF612ACC490 $2E89E8B67B273E6B3F26545FC28278E0F0744817 $2FF236B93D8574F3F77156B9542CA0554CB1DA2C $32F0A019C71C26876ECAE355DD8415A355A86920 $330A5D4F9D5D5326B9AAC12C339EB
Nov 3, 2024 09:43:21.366024017 CET	1236	IN	Data Raw: 36 35 32 32 32 39 36 46 38 37 36 43 33 45 33 33 46 35 30 43 37 31 39 36 34 32 20 24 35 45 34 34 41 31 42 33 43 32 41 42 41 35 43 41 30 43 38 36 43 39 34 31 32 46 43 39 39 42 33 41 31 46 37 31 33 34 42 37 20 24 35 46 30 43 45 37 43 36 33 35 39 30 Data Ascii: 6522296F876C3E33F50C719642 $5E44A1B3C2ABA5CA0C86C9412FC99B3A1F7134B7 $5F0CE7C63590B29E629750E9C5BCDF56C40D6898 $5F88F977B6DEB1258197737916F6D93BBAB84F24 $60FE782DF923698546023C6F14FEC0884624F35C $63F7457B4787B7D80B897EF06F838E7A1FDEB311 $64022
Nov 3, 2024 09:43:21.366034985 CET	1236	IN	Data Raw: 32 38 44 45 41 44 42 37 20 24 38 33 39 32 43 46 37 44 44 33 45 38 42 31 37 36 38 35 44 44 45 39 38 42 30 42 43 34 45 37 33 39 31 46 37 32 37 32 34 36 20 24 38 34 38 46 42 38 37 41 39 39 42 42 39 38 32 42 34 34 31 36 32 41 34 30 35 32 30 31 33 41 Data Ascii: 28DEADB7 $8392CF7DD3E8B17685DDE98B0BC4E7391F727246 $848FB87A99BB982B44162A4052013A2CD42E06EF $854778D26E70FCADB5C16EFDC94915563B0AE678 $854E99C72A2E6EC5B3B3D11670A811FAC03A3940 $85D5976EAA9EEDC43737209A80678A245145F806 $8678C629D35E2CA6A0D1A3D
Nov 3, 2024 09:43:21.366046906 CET	1188	IN	Data Raw: 42 35 44 31 42 31 30 38 37 31 30 43 38 45 34 45 33 42 32 41 34 30 39 45 42 35 35 30 39 46 42 38 20 24 42 30 33 35 43 37 38 43 37 32 37 34 46 32 31 46 38 42 36 46 32 45 34 31 46 42 33 38 31 43 39 43 39 41 37 33 43 31 37 41 20 24 42 30 41 42 44 36 Data Ascii: B5D1B108710C8E4E3B2A409EB5509FB8 $B035C78C7274F21F8B6F2E41FB381C9C9A73C17A $B0ABD6E73A61F372EEE907562B22CA34E5691C63 $B3093165013FCDD3CDDEE7693A0827E2F9342C2E $B99C68B77AE06CD0FD3C19E6F5552872BE2E7604 $BA8721EC8D02494383D2F162F1E2D0C1C90AA0E9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	50069	193.23.244.244	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:21.352770090 CET	292	OUT	GET /tor/server/fp/0011bd2485ad45d984ec4159c88fc066e5e3300e HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	50071	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:22.762387991 CET	292	OUT	GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:23.537225962 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:23 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:23 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 34 35 2e 31 34 31 2e 32 31 35 2e 35 36 20 38 34 33 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 61 59 56 48 44 30 51 71 75 63 6c 6d 58 48 49 76 62 77 6c 64 43 45 49 59 4f 6f 36 59 6c 5a 37 50 7a 74 73 42 35 72 57 6d 30 43 65 41 51 41 67 42 41 42 59 4b 72 38 6d 0a 69 49 64 59 75 76 36 65 58 71 66 79 62 73 79 39 36 68 64 6b 57 69 51 63 37 31 51 68 55 6a 34 61 54 54 35 35 79 6b 78 45 67 66 45 36 38 6e 39 50 64 47 39 58 53 62 6c 35 2b 77 55 2f 49 50 38 43 0a 79 46 63 55 4b 56 46 37 49 6b 7a 41 42 73 6a 32 65 32 52 45 34 37 30 6a 52 6b 4c 36 77 74 63 6b 6b 71 73 58 78 4b 6a 75 39 59 70 44 76 33 63 4b 45 2f 5a 31 54 64 32 48 65 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 57 43 71 2f 4a 6f 69 48 57 4c 72 2b [TRUNCATED] Data Ascii: router Quetzalcoatl 45.141.215.56 8430 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAaYVHD0QquclmXHIvbwldCEIYOo6YlZ7PztsB5rWm0CeAQAgBABYKr8miIdYuv6eXqfybsy96hdkWiQc71QhUj4aTT55ykxEgfE68n9PdG9XSbl5+wU/IP8CyFcUKVF7IkzABsj2e2RE470jRkL6wtckkqsXxKju9YpDv3cKE/Z1Td2Hegg=-----END ED25519 CERT-----master-key-ed25519 WCq/JoiHWLr+nl6n8m7MveoXZFokHO9UIVI+Gk0+ecoor-address [2a12:a800:2:1:45:141:215:56]:8430platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:23:48fingerprint 5A7D E908 3BE6 228A 4339 55A4 649C 9865 C909 676Auptime 324066bandwidth 1073741824 1073741824 7290636extra-info-digest 865236792538F6B57AAE337CF4E02E067C9751FF sRTzbsfqZuyJF2Gvyllzvrxo4gE3M8qWYmDho/a1rO8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM7rdccbDS85i2LeGoAluJvxILf260QWFZvcDJhVdB3wS2JewPwi7rfjDRnTj5XXJc2Gm6PYCxjkByB/glW/IvbrfkQ+Y608Blbq04EEZvXwS1i/ACBgA1Ya [TRUNCATED]
Nov 3, 2024 09:43:23.537358999 CET	764	IN	Data Raw: 48 6d 68 78 5a 5a 4d 75 71 76 51 46 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 Data Ascii: HmhxZZMuqvQFAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL14+tqxvYaTEw9V1DasHGlbNVgSjQUSkOUnZ9sFctWhskzK4lwpminq7l40C3wc0UjDRSPavBd5PLfBg7uu3yEzj3mBX5usFbk5VlshkML/4ZGEleS+6SyFQWMFqyIxTnPtEIg6rfE5
Nov 3, 2024 09:43:23.537389040 CET	1236	IN	Data Raw: 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 30 32 46 43 46 36 32 43 30 41 44 33 41 44 31 44 32 30 38 44 37 46 32 37 45 31 32 45 38 38 34 30 45 46 35 33 43 37 45 30 20 24 30 33 34 36 35 44 32 31 41 32 32 42 Data Ascii: D ED25519 CERT-----family $02FCF62C0AD3AD1D208D7F27E12E8840EF53C7E0 $03465D21A22B24B242301471D5AA11E4E0E0C915 $035F813195F0CB9F567EDFDF60C6745CA36BA0BD $0632EC43FEA8EA3F377FE2E34DA671746F1642DD $0705F969B825FAE29BCEB3F692B0A4224DED82E0 $07DCE
Nov 3, 2024 09:43:23.537400961 CET	1236	IN	Data Raw: 41 36 42 39 38 42 39 42 20 24 31 38 39 43 34 34 44 44 30 36 33 31 32 44 36 44 46 38 46 42 35 37 41 39 34 34 45 36 38 31 39 46 46 32 34 35 37 34 30 43 20 24 31 41 32 34 33 44 41 36 46 36 33 39 41 39 43 39 39 42 34 33 39 31 31 35 38 45 30 45 31 34 Data Ascii: A6B98B9B $189C44DD06312D6DF8FB57A944E6819FF245740C $1A243DA6F639A9C99B4391158E0E14E89C29754C $1A45601A517304EA7C8DC9339A99FE6C65CAA499 $1B6BCBCDB384364B6FB4F3576CA70AECFC083641 $1E3C197C8C922128FF049856E0536FF9CB4E5E8C $1F2F634D6D87CF6C5358C13
Nov 3, 2024 09:43:23.537410021 CET	1236	IN	Data Raw: 45 32 35 42 32 43 37 39 35 34 35 36 30 39 43 43 30 45 35 38 37 36 35 43 44 41 46 46 33 34 39 35 20 24 33 33 35 33 31 31 43 36 30 44 43 42 33 38 41 31 33 37 31 35 38 38 41 37 46 31 32 34 44 46 30 44 32 44 43 32 46 34 35 39 20 24 33 33 44 45 42 46 Data Ascii: E25B2C79545609CC0E58765CDAFF3495 $335311C60DCB38A1371588A7F124DF0D2DC2F459 $33DEBFF96FD95D7D5084026F6C4A55F9EC4A094C $3443ECBD0E1E71179B0F0B98184A48E255FE0E18 $34B80D703F4D6350146B684E66D962A23A830117 $34CA0E8F7838FCC9984C7BAA282884A4F843A423
Nov 3, 2024 09:43:23.537420988 CET	1236	IN	Data Raw: 35 35 42 43 31 44 41 39 34 44 33 32 43 46 20 24 34 33 45 46 35 31 34 31 41 34 34 31 37 44 30 42 46 31 42 30 41 42 32 41 44 32 43 33 44 37 34 43 32 32 33 35 35 44 30 41 20 24 34 34 36 37 43 46 38 34 41 34 35 39 39 39 43 43 35 35 33 32 33 32 38 34 Data Ascii: 55BC1DA94D32CF $43EF5141A4417D0BF1B0AB2AD2C3D74C22355D0A $4467CF84A45999CC553232846CB6AA5FEBAC058B $446E16B00D5131DAC9643AB10136B3CD19B1E9B9 $44FA36A839BA35EB15F3EC5CB5FB355238A32ABC $44FF5FFA5F90096198D514412A78C1692DBEB0EA $460D13CE3971BD213
Nov 3, 2024 09:43:23.537432909 CET	1236	IN	Data Raw: 44 35 33 39 30 46 45 32 44 39 41 37 38 44 35 31 33 35 31 42 46 42 42 31 35 31 43 45 31 37 43 30 35 44 46 41 31 44 20 24 35 39 36 33 33 32 33 35 45 42 33 32 38 39 41 37 32 31 46 39 31 32 36 37 41 38 42 43 32 42 31 37 38 41 37 35 44 45 35 44 20 24 Data Ascii: D5390FE2D9A78D51351BFBB151CE17C05DFA1D $59633235EB3289A721F91267A8BC2B178A75DE5D $59A5BACFE32B6CA0F8F67B6621B3E8B89312CB7A $5A234337E19813216DD21237B36D4F252D7D7430 $5A47C6C5984F986A91DB4FB22869F71142D87362 $5A7DE9083BE6228A433955A4649C9865C90
Nov 3, 2024 09:43:23.537448883 CET	1236	IN	Data Raw: 31 34 37 38 41 35 42 43 38 34 38 45 42 30 42 35 44 35 44 42 20 24 36 39 34 31 39 44 33 36 31 39 38 45 42 30 35 30 38 39 30 34 36 36 30 41 41 45 43 41 45 45 37 38 35 44 36 38 38 41 36 31 20 24 36 41 36 30 31 39 38 37 30 33 41 31 32 44 36 35 30 45 Data Ascii: 1478A5BC848EB0B5D5DB $69419D36198EB0508904660AAECAEE785D688A61 $6A60198703A12D650EBB6EC751CDAEB611BBC04D $6A6A34B55DF1B0A1D97376721E7669A26ACD447C $6C95E81A86B48DB835AE1431277A301318422A18 $6E23234E4A37971B3695A6CDB5A462564E629DF9 $6E736FF4BA2
Nov 3, 2024 09:43:23.537461042 CET	1236	IN	Data Raw: 32 43 20 24 37 43 36 36 38 36 31 39 30 43 45 36 45 38 41 30 41 31 41 35 42 35 42 38 34 35 42 46 33 46 31 34 44 32 35 32 44 30 44 46 20 24 37 43 36 46 44 46 31 43 45 45 37 43 39 32 34 45 45 30 36 43 30 36 34 37 30 38 43 39 45 31 43 43 30 42 43 38 Data Ascii: 2C $7C6686190CE6E8A0A1A5B5B845BF3F14D252D0DF $7C6FDF1CEE7C924EE06C064708C9E1CC0BC8835C $7C9FC7C99D7F83980E621BA8D4E0D40FCE53104F $7F35906CE8E33C7FB60E9EA12101AB4CBE13403C $7FE441E277BE331F249DBF8971E5B3D39418845A $80F322ED0995F27CD26B5A9DE7B80
Nov 3, 2024 09:43:23.537472963 CET	988	IN	Data Raw: 44 31 32 36 36 33 39 39 43 39 36 35 33 37 36 32 30 42 46 33 37 30 30 45 37 42 20 24 39 31 38 30 38 34 30 46 36 42 46 46 32 33 35 43 41 37 46 34 41 35 31 42 45 43 34 36 30 37 35 42 35 41 35 42 31 35 30 39 20 24 39 32 34 37 42 35 34 44 43 44 34 39 Data Ascii: D1266399C96537620BF3700E7B $9180840F6BFF235CA7F4A51BEC46075B5A5B1509 $9247B54DCD49174DBD817AA73FD6DE804DFEC2C2 $92A8C8292F06E18B116DDD50F517040A17D80512 $93515322616E4C93FFB5993936F187B0DE005F8C $9376A43695CBB66C256DCC87932EE885EA9AF5EC $94E41
Nov 3, 2024 09:43:23.542360067 CET	1236	IN	Data Raw: 32 32 34 30 20 24 41 31 46 35 37 45 42 41 41 43 31 38 33 43 36 42 30 41 34 39 45 36 32 45 35 42 32 33 45 38 43 31 42 42 36 43 31 30 32 32 20 24 41 34 46 34 32 41 45 36 35 46 31 31 36 33 34 43 34 32 41 33 46 33 39 35 32 45 37 31 39 46 34 37 30 39 Data Ascii: 2240 $A1F57EBAAC183C6B0A49E62E5B23E8C1BB6C1022 $A4F42AE65F11634C42A3F3952E719F47091BD36F $A5BBC2C61B1F6B09097011C4CE56BBE57DE5AC92 $A6191F3949C33923923B5CCA3663B483FA37E7B9 $A84AD66BC34D283D0F865DC16D4DB62635D1D9B3 $A9044B9AE03BCA32DEECB70A973

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	50072	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:23.062405109 CET	292	OUT	GET /tor/server/fp/b05ac4e8b1e12a9fa9527e4bfa6d2a728931d34a HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:24.114865065 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:23 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:23 GMT Data Raw: 72 6f 75 74 65 72 20 4e 54 48 34 34 52 33 20 31 39 32 2e 34 32 2e 31 31 36 2e 32 31 38 20 39 30 30 32 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 65 70 41 64 6f 39 78 75 4e 6d 6a 59 6a 72 72 30 75 4f 6a 32 47 4c 52 78 41 62 43 54 38 50 57 61 39 4b 74 58 6f 77 72 4a 65 57 6e 51 2f 51 41 51 41 67 42 41 43 32 42 64 65 54 0a 31 77 2f 45 64 71 6f 47 74 4b 31 65 4f 56 45 33 30 32 34 78 48 75 47 4b 72 49 35 49 63 74 75 47 6f 53 55 43 71 79 54 7a 63 4c 32 66 52 4b 31 73 67 63 66 41 36 68 77 58 43 35 56 54 6c 6f 35 54 0a 7a 52 4a 43 74 49 30 56 4b 44 74 4f 39 73 66 78 73 35 47 4c 74 4d 62 30 5a 41 34 56 59 48 4f 62 4a 51 65 6b 49 5a 33 38 52 31 53 53 54 7a 79 59 71 39 33 42 67 50 51 71 77 51 77 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 74 67 58 58 6b 39 63 50 78 48 61 71 42 72 53 74 [TRUNCATED] Data Ascii: router NTH44R3 192.42.116.218 9002 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1epAdo9xuNmjYjrr0uOj2GLRxAbCT8PWa9KtXowrJeWnQ/QAQAgBAC2BdeT1w/EdqoGtK1eOVE3024xHuGKrI5IctuGoSUCqyTzcL2fRK1sgcfA6hwXC5VTlo5TzRJCtI0VKDtO9sfxs5GLtMb0ZA4VYHObJQekIZ38R1SSTzyYq93BgPQqwQw=-----END ED25519 CERT-----master-key-ed25519 tgXXk9cPxHaqBrStXjlRN9NuMR7hiqyOSHLbhqElAqsor-address [2001:67c:6ec:203:192:42:116:218]:9002platform Tor 0.4.8.12 on FreeBSDproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 03:37:46fingerprint B05A C4E8 B1E1 2A9F A952 7E4B FA6D 2A72 8931 D34Auptime 1767641bandwidth 1073741824 1073741824 38175535extra-info-digest BF163F254C62287A46DB933158AAA131E77A34FD 5D77Cwg2M2IpmxJlC5BB1cTLJd4MgBeoDI0h2/+NViUonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKmyPTXJPxNhOAMRLp2f05hfBKu6r3kYBm29wCGpnc94OxyHyIvpOrVHmSkZHynKVqAoL1VPPqa8t4ccSVPLVkVMggBlxo99v4EPW61frBeZkn03SzKkB [TRUNCATED]
Nov 3, 2024 09:43:24.114900112 CET	1236	IN	Data Raw: 7a 45 41 6e 69 53 51 41 41 2b 73 2f 49 38 4c 48 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 Data Ascii: zEAniSQAA+s/I8LHAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKuRanMDVcmN1F66U3k/EEAjtaaetk8lFILgJM9eDpIkJDWDuxDRmhuuuxm1vkCY3xjd80jJhPv8nS8iu4pEIooYkBefPWrNgotxtaqAeEW2dwvSFgJxeW/Wxlq5EA1d5unqkxQl
Nov 3, 2024 09:43:24.114913940 CET	1236	IN	Data Raw: 43 35 30 32 31 45 36 35 31 30 37 34 32 35 37 43 32 39 30 38 20 24 30 36 41 30 34 38 32 44 33 44 45 44 35 37 43 45 38 45 30 31 33 31 35 33 31 42 33 44 42 34 34 41 38 41 45 46 36 38 33 43 20 24 30 37 37 43 34 41 38 39 41 30 36 46 39 35 36 30 43 45 Data Ascii: C5021E651074257C2908 $06A0482D3DED57CE8E0131531B3DB44A8AEF683C $077C4A89A06F9560CED75BEF751BA2334378C3A3 $07C76EC5CC5CFDA80DE3082BC2F007105E2FC2EE $099B9AE1A6598017462F5C0EBD78B15FCAC27D56 $09E5621C0D7400FC18EF137A679F7FEB78F8650C $0A42ECB653F
Nov 3, 2024 09:43:24.114924908 CET	1236	IN	Data Raw: 32 33 20 24 31 44 42 46 30 30 38 43 39 43 44 36 44 31 45 44 45 42 43 30 46 38 39 35 44 44 44 36 44 39 36 37 33 33 33 38 34 33 46 39 20 24 31 45 32 30 42 32 39 45 34 32 41 32 35 34 31 39 33 44 45 37 44 33 39 32 43 36 30 37 35 41 33 46 41 35 35 34 Data Ascii: 23 $1DBF008C9CD6D1EDEBC0F895DDD6D967333843F9 $1E20B29E42A254193DE7D392C6075A3FA554E747 $1E4B09B0A4FDB0B2149785E2AFAA4AE7271B2E20 $1E76793C9144EBB313F2B091BDF7D14AAC70C02F $203351B143F7FD85A9797755586B08122186174E $213906DD6FBC4DA748260366E2CF2
Nov 3, 2024 09:43:24.114936113 CET	848	IN	Data Raw: 46 34 34 32 30 45 33 42 36 39 32 39 46 31 30 41 31 45 30 41 32 45 35 36 41 45 20 24 33 38 33 44 42 32 36 42 34 36 38 34 45 43 38 38 43 39 35 42 34 31 33 38 32 37 41 32 42 45 38 39 37 32 30 42 30 39 36 44 20 24 33 38 34 31 34 33 34 39 37 32 37 42 Data Ascii: F4420E3B6929F10A1E0A2E56AE $383DB26B4684EC88C95B413827A2BE89720B096D $38414349727B47C7CFDCD4D1051AC86592A24DA8 $3960E28DFC659F2A15A3F4E987A8D064A3C64CA4 $39CACE2705E7C7343FC0EA246CA84B523379E04B $3A7D4C0E24D4B485297930F40CEA12CEA2817146 $3AC3A
Nov 3, 2024 09:43:24.114945889 CET	1236	IN	Data Raw: 37 36 37 37 30 36 42 39 38 35 35 39 35 31 37 35 32 36 20 24 34 36 45 30 34 38 37 45 45 45 46 44 36 39 34 43 45 36 32 35 43 43 36 45 31 32 44 30 33 32 33 39 35 43 30 31 44 42 38 32 20 24 34 37 30 42 35 34 46 35 41 41 32 38 41 30 45 30 33 31 30 42 Data Ascii: 767706B98559517526 $46E0487EEEFD694CE625CC6E12D032395C01DB82 $470B54F5AA28A0E0310B8B8DA36B33CDB851ECD7 $473A33452FBD458B24270E954B31A18C97B37BB6 $47CC44E9C4069D5013BB79709D5A7A4334B44EB3 $47F2257B2BE37EC8832E4ED01B7093C60BA8AC10 $48553B8FF2195
Nov 3, 2024 09:43:24.114959955 CET	1236	IN	Data Raw: 20 24 35 41 30 31 38 39 43 33 46 31 42 46 38 38 42 36 39 34 34 37 42 33 33 39 38 36 44 38 42 32 35 33 32 43 43 46 32 42 44 33 20 24 35 41 30 36 39 33 46 31 38 30 33 43 37 30 36 46 46 31 45 44 45 31 44 30 45 42 31 43 37 46 43 30 38 46 45 38 44 37 Data Ascii: $5A0189C3F1BF88B69447B33986D8B2532CCF2BD3 $5A0693F1803C706FF1EDE1D0EB1C7FC08FE8D748 $5AE330C85957952B1D4A742AFC1D0FD0107B6165 $5BECFA734A7333BE2B73BF3291C827887CCAE028 $5CC0AF3454220B8273904827661B2E51832FAC44 $5D52A0405A9864B718CC8389229BAE0
Nov 3, 2024 09:43:24.114975929 CET	1236	IN	Data Raw: 32 41 32 45 31 32 35 43 39 41 30 41 36 34 39 31 46 46 37 37 46 42 36 44 20 24 37 42 35 38 33 30 36 45 44 44 31 42 38 41 36 44 32 43 37 36 42 37 44 36 41 44 38 32 39 46 34 33 44 33 46 30 41 44 43 44 20 24 37 43 30 36 34 30 38 45 44 39 33 33 46 46 Data Ascii: 2A2E125C9A0A6491FF77FB6D $7B58306EDD1B8A6D2C76B7D6AD829F43D3F0ADCD $7C06408ED933FF9691F87C7A780D4107F3D7D175 $7D9221E99110ED3A1A7E0086D68F920EF1D1DB8C $7E95FDF5EF72C6543A448A202AFED4B459E97EA2 $7F583E8B88DB8FB9085B3B4D4AD9D9FF7D161C25 $7F9B6D6
Nov 3, 2024 09:43:24.114989996 CET	1236	IN	Data Raw: 43 39 31 41 44 44 20 24 39 39 44 43 35 31 44 31 42 33 37 30 42 38 43 44 30 37 37 44 41 41 37 43 36 43 34 30 43 45 39 39 31 41 31 34 41 30 31 39 20 24 39 41 30 31 43 38 30 37 37 31 45 32 42 33 39 39 32 38 34 34 41 35 44 32 36 37 41 44 46 41 36 36 Data Ascii: C91ADD $99DC51D1B370B8CD077DAA7C6C40CE991A14A019 $9A01C80771E2B3992844A5D267ADFA662ED4450D $9AAEE27F3702F87BA8BE95BD12E86CAE3DF66697 $9B172F69B746C3B415E64B8E9DCEF791EDF0ADC5 $9B2399FC2E17346B5EDED82BF8722F988C64930E $9BB3AF95019949509EFA88635
Nov 3, 2024 09:43:24.115001917 CET	848	IN	Data Raw: 37 34 37 30 41 41 41 41 35 39 30 30 37 37 33 38 33 41 32 34 34 33 37 32 32 36 41 31 32 37 20 24 42 31 43 36 35 41 44 31 35 38 39 31 36 35 42 34 37 46 30 35 33 35 35 38 32 37 30 32 38 43 44 41 32 44 44 42 46 34 38 42 20 24 42 32 41 32 30 30 38 43 Data Ascii: 7470AAAA590077383A24437226A127 $B1C65AD1589165B47F05355827028CDA2DDBF48B $B2A2008CE4E37CC4228981B8167308DF8E4DB6E5 $B48ED936B2FF3A776A333AE8A81D464BEA8FF560 $B4B883CD0DBD5E7B6D07AFC6941474EEC37A862B $B5558CFA70A5308582B25767C9698E6DBE6A90B2 $B
Nov 3, 2024 09:43:24.119961023 CET	1236	IN	Data Raw: 45 32 45 38 31 34 46 31 35 41 36 34 35 31 41 36 44 43 32 42 34 30 20 24 43 37 42 43 44 30 33 31 41 41 43 34 41 34 43 31 46 39 31 30 36 44 41 46 44 39 43 35 30 46 32 35 30 42 36 43 36 36 45 31 20 24 43 41 31 41 43 35 34 43 34 30 31 43 43 46 45 36 Data Ascii: E2E814F15A6451A6DC2B40 $C7BCD031AAC4A4C1F9106DAFD9C50F250B6C66E1 $CA1AC54C401CCFE69943542F2CF9843BC6917820 $CC004E20B4E30D42B3BA1A1661640C50611112F5 $CDC93EE3C0DD5193B6539035D079CDC9FE060448 $CE96F83E8A12A8468AA286198CC7C321069A5D5B $CEEE6DA54

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	50073	45.66.35.11	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:23.885390043 CET	289	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:24.942651033 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:24 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:24 GMT Data Raw: 72 6f 75 74 65 72 20 46 72 65 65 45 78 69 74 20 31 37 39 2e 34 33 2e 31 35 39 2e 32 30 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 68 5a 41 64 76 53 4a 47 6b 62 67 72 41 44 2f 4a 6b 2b 58 4a 62 69 4e 6f 34 50 63 4b 46 49 68 36 6d 36 2f 33 7a 61 46 2b 41 75 77 50 47 72 41 51 41 67 42 41 43 4d 4c 6b 52 69 0a 67 61 66 30 6d 47 58 35 35 63 2b 32 31 51 4b 4d 75 53 6e 74 64 65 68 46 68 7a 30 71 65 30 50 53 4b 37 6d 44 63 65 4f 6a 46 52 48 48 37 76 4a 34 51 43 34 36 63 50 4e 50 47 59 43 4b 41 4b 7a 6b 0a 44 50 5a 33 5a 57 30 32 66 44 44 56 59 37 4c 59 43 32 6b 51 50 32 73 4d 4f 7a 52 53 76 7a 6d 67 78 75 42 41 56 58 75 72 2b 35 65 4f 4d 44 38 63 39 42 63 30 2b 50 53 58 51 51 49 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6a 43 35 45 59 6f 47 6e 39 4a 68 6c 2b 65 58 [TRUNCATED] Data Ascii: router FreeExit 179.43.159.200 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1hZAdvSJGkbgrAD/Jk+XJbiNo4PcKFIh6m6/3zaF+AuwPGrAQAgBACMLkRigaf0mGX55c+21QKMuSntdehFhz0qe0PSK7mDceOjFRHH7vJ4QC46cPNPGYCKAKzkDPZ3ZW02fDDVY7LYC2kQP2sMOzRSvzmgxuBAVXur+5eOMD8c9Bc0+PSXQQI=-----END ED25519 CERT-----master-key-ed25519 jC5EYoGn9Jhl+eXPttUCjLkp7XXoRYc9KntD0iu5g3Eplatform Tor 0.4.8.10 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 16:25:59fingerprint 5A82 9292 6C5E 5A24 6D35 B843 A729 42FC EC23 5BACuptime 25164563bandwidth 1073741824 1073741824 24652284extra-info-digest 4C82EBF85E068B895D9CED55064E5B5D2374C838 FCBswJVtO1JV5y9tvUpsJQYyDHYI0Q2dkns/ZcrEPBYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKlTxk7HZTUduzD+rhfkL0OgAbjljsB5K6xLQpBq5Av+4AE94c+faVg5zBkggYxFH2mXTrgXBGrA8yjzqrbY0iko5P712E14ljAoRD5AVkf1t85jGCopl1HSyRqndJbiG/sgglOWOHH1ltJNXsYVlObuxRNbeu5KcTca1P [TRUNCATED]
Nov 3, 2024 09:43:24.942676067 CET	1236	IN	Data Raw: 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 42 70 70 46 4f 42 74 38 64 4f 45 73 75 4e 31 45 79 4a 30 62 70 79 6a 54 51 Data Ascii: ---signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMBppFOBt8dOEsuN1EyJ0bpyjTQdTBJJj3350JeI2dxZhcv7CUfyIS05jNOwHJ43aXXItaHy6lzZtD6gwd6rjd1pJdjQ29RtEcdT7o1fV38HOqg4xxTLhhebtEIhJGc1+R5+Ay5hN3GJnxywrZKXdWplh9VzjrTpFI0UftvhswxpAgMBAAE=-----
Nov 3, 2024 09:43:24.942691088 CET	424	IN	Data Raw: 72 65 6c 61 79 2e 63 6f 5d 0a 6e 74 6f 72 2d 6f 6e 69 6f 6e 2d 6b 65 79 20 6f 68 52 33 4d 79 47 71 4a 6c 2f 6b 70 38 6b 34 41 77 6d 4a 50 31 38 38 6c 66 63 68 70 4d 6a 41 79 32 6a 33 33 6e 4f 77 7a 7a 6f 0a 72 65 6a 65 63 74 20 30 2e 30 2e 30 2e Data Ascii: relay.co]ntor-onion-key ohR3MyGqJl/kp8k4AwmJP188lfchpMjAy2j33nOwzzoreject 0.0.0.0/8:reject 169.254.0.0/16:reject 127.0.0.0/8:reject 192.168.0.0/16:reject 10.0.0.0/8:reject 172.16.0.0/12:reject 179.43.159.200:accept :20-23acce
Nov 3, 2024 09:43:24.942703962 CET	1236	IN	Data Raw: 61 63 63 65 70 74 20 2a 3a 35 35 34 0a 61 63 63 65 70 74 20 2a 3a 35 36 33 0a 61 63 63 65 70 74 20 2a 3a 35 38 37 0a 61 63 63 65 70 74 20 2a 3a 36 33 36 0a 61 63 63 65 70 74 20 2a 3a 37 30 36 0a 61 63 63 65 70 74 20 2a 3a 37 34 39 0a 61 63 63 65 Data Ascii: accept :554accept :563accept :587accept :636accept :706accept :749accept :873accept :902-904accept :981accept :989-990accept :991accept :992accept :993accept :994accept :995accept :1194accept :1220accept :129
Nov 3, 2024 09:43:24.942717075 CET	4	IN	Data Raw: 2d 2d 2d 0a Data Ascii: ---

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	50074	193.23.244.244	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:26.541907072 CET	292	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	50075	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:27.687597036 CET	292	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	50076	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:28.465504885 CET	292	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	50078	193.23.244.244	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:32.975701094 CET	292	OUT	GET /tor/server/fp/95545cba71ad21136c40c927f19c067ff128078f HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	50079	45.66.35.11	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:34.033886909 CET	289	OUT	GET /tor/server/fp/95545cba71ad21136c40c927f19c067ff128078f HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:35.544544935 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:35 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:35 GMT Data Raw: 72 6f 75 74 65 72 20 62 61 75 72 75 69 6e 65 20 39 35 2e 32 31 34 2e 35 33 2e 39 36 20 34 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 63 5a 41 66 56 50 56 30 49 74 79 55 2b 48 47 6a 59 5a 44 67 2b 73 71 68 46 42 35 5a 6f 6b 34 2f 65 6f 46 44 55 30 79 2f 42 47 6d 32 4f 46 41 51 41 67 42 41 43 72 73 49 5a 7a 0a 69 6a 6f 32 4c 75 6e 47 63 6d 76 68 42 76 30 47 4d 6c 62 33 62 75 62 7a 4c 6d 75 69 52 68 67 36 50 42 5a 4e 77 75 61 33 66 35 4b 61 65 61 39 76 58 52 46 6f 56 78 67 69 67 6e 4b 5a 79 78 36 48 0a 68 39 71 53 35 31 53 59 55 51 4c 6b 58 4c 57 4a 51 51 5a 35 34 47 65 47 68 6f 71 4b 51 30 46 59 70 48 52 6e 64 52 43 54 4e 4b 39 54 52 74 46 70 44 58 76 6c 74 53 49 32 42 77 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 71 37 43 47 63 34 6f 36 4e 69 37 70 78 6e 4a 72 34 [TRUNCATED] Data Ascii: router bauruine 95.214.53.96 4443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1cZAfVPV0ItyU+HGjYZDg+sqhFB5Zok4/eoFDU0y/BGm2OFAQAgBACrsIZzijo2LunGcmvhBv0GMlb3bubzLmuiRhg6PBZNwua3f5Kaea9vXRFoVxgignKZyx6Hh9qS51SYUQLkXLWJQQZ54GeGhoqKQ0FYpHRndRCTNK9TRtFpDXvltSI2Bwk=-----END ED25519 CERT-----master-key-ed25519 q7CGc4o6Ni7pxnJr4Qb9BjJW927m8y5rokYYOjwWTcIor-address [2a03:cfc0:8000:7::5fd6:3561]:4443platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 06:11:42fingerprint 9554 5CBA 71AD 2113 6C40 C927 F19C 067F F128 078Fuptime 1720959bandwidth 65536000 91750400 21183426extra-info-digest 45D20C3495DE370D92CC0BCEF77FDB9E3EC61BDC 6l42Ly4yPBaGa15GYcaocVNxFOLa9lpAJFXngNhIG7Aonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALRTdneSCIcAyzY77PJDaISbvXToIfc4E4vkQWfMY77YlqaqJKtFqU+XZCflLAYiqhvhTJFic/SzL9T0c/5YWfPgWwO0HmDeGMKUNYgQ8SmcoYjhQktQmtNSWUn3Q7g [TRUNCATED]
Nov 3, 2024 09:43:35.544572115 CET	1236	IN	Data Raw: 4d 62 43 68 56 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d Data Ascii: MbChVAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAJ97hUJ8nj36SDif2kP7ky/oGDJKPiWIqSRTnuOee1v4yT1lKQ3mnMtUeI8dDeziRxWzUkZCgNkv7q3vxAbvgR7FtVu9snS0UiiTPYhJr8b7DQvYc/Y2+qSSiIcB/EjLKyS+fqu0Pn1BAm/sbBf
Nov 3, 2024 09:43:35.544584036 CET	1236	IN	Data Raw: 42 34 41 45 35 37 32 44 43 20 24 31 35 33 34 36 30 43 30 46 45 30 39 34 35 42 30 32 36 39 39 39 39 35 35 34 45 38 35 35 33 34 41 32 46 37 30 39 44 38 44 20 24 31 44 32 34 32 39 32 31 31 33 36 31 30 46 30 30 39 36 46 43 43 35 35 34 36 36 34 45 43 Data Ascii: B4AE572DC $153460C0FE0945B0269999554E85534A2F709D8D $1D24292113610F0096FCC554664EC33BE27A4F54 $1F953ACBFB9F44CE38543B7E9C0E0BE1BDC7E941 $245C88E535BB7D80B7B43B36AB5B300D6B214A40 $2925365310A2487781BA7E743E155E4753C1D3EB $2D8A15352AEC175C8CEDA1
Nov 3, 2024 09:43:35.544595003 CET	636	IN	Data Raw: 38 35 31 33 32 35 42 38 38 37 43 31 34 37 36 35 31 30 46 30 46 30 35 34 46 41 36 41 32 45 44 34 43 20 24 36 45 36 45 31 31 31 35 35 42 45 33 45 37 46 33 38 42 41 33 37 30 32 41 42 35 42 41 31 38 43 39 31 33 39 44 38 37 33 34 20 24 36 46 46 31 34 Data Ascii: 851325B887C1476510F0F054FA6A2ED4C $6E6E11155BE3E7F38BA3702AB5BA18C9139D8734 $6FF148A28DB6478CAC9ADFDCACC0D81C0C212EA2 $7350784A5CCD069975705F58BA71D2BCF83D97A9 $7362770CBA5B54C3123CFB243D8217531E2FA036 $753F80B173879F749A44AC39C1A45DB174D8BDF6
Nov 3, 2024 09:43:35.544608116 CET	1236	IN	Data Raw: 30 39 37 33 41 35 46 45 38 46 36 30 44 41 33 38 35 39 43 30 46 34 38 36 42 33 30 20 24 38 39 42 46 37 44 35 33 31 36 43 44 37 37 45 30 30 31 35 34 37 42 34 39 37 42 44 39 34 38 43 32 33 36 32 42 39 42 33 30 20 24 38 41 38 45 38 38 39 34 34 46 45 Data Ascii: 0973A5FE8F60DA3859C0F486B30 $89BF7D5316CD77E001547B497BD948C2362B9B30 $8A8E88944FEC21DC4DFEB8531D614E1AAF46DDFD $8CA535008585A6DA7A673A9C4E275FFB7A51854E $8CB12C1DDD2071C6F6CB09D73523689F1D351788 $8D89ECA4C93928711A0BD6DB80F547A09AEF2D67 $8E6E
Nov 3, 2024 09:43:35.544616938 CET	212	IN	Data Raw: 31 43 33 32 45 44 34 43 44 20 24 44 44 35 35 36 32 39 37 42 46 41 30 32 33 35 30 31 44 45 37 33 31 35 39 43 38 42 32 30 32 35 30 42 45 32 30 37 33 30 38 20 24 45 36 35 36 30 33 30 44 44 46 45 41 36 42 33 38 41 35 39 30 36 31 32 42 46 45 34 31 39 Data Ascii: 1C32ED4CD $DD556297BFA023501DE73159C8B20250BE207308 $E656030DDFEA6B38A590612BFE419DBC0649A74D $E6B550BFD6A35725EFADA0DFD07511532FC18AE8 $E733657848B511BA14CD8AEC9C5EA89CF50574D1 $EA08FDC39F2FF1EDEC7659AC734557A99
Nov 3, 2024 09:43:35.544630051 CET	1035	IN	Data Raw: 46 31 31 45 38 34 43 20 24 45 43 42 33 42 34 42 37 34 45 39 31 42 30 42 43 34 34 36 32 31 35 45 42 32 36 34 34 37 39 42 44 41 45 35 33 45 34 38 43 20 24 45 43 45 43 38 41 45 43 36 43 39 38 38 36 34 37 45 35 31 30 31 34 46 34 46 32 30 33 34 39 45 Data Ascii: F11E84C $ECB3B4B74E91B0BC446215EB264479BDAE53E48C $ECEC8AEC6C988647E51014F4F20349E24E1DD6A6 $ED6EE4882B771E84D5330BB62800ABEF314237EB $F0CBCBA0CACE02550DAA822B94C5797DDC1FC78A $F1A3439F09057EF64CCC741FE2FD42FD5A183B00 $F8C996BDC49BE4D4C41759B0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	50080	216.218.219.41	80	6388	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:36.045378923 CET	292	OUT	GET /tor/server/fp/22cdc8de6be8a6e6ed4a9fadf66740b8f1a29de0 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:36.818121910 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:36 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:36 GMT Data Raw: 72 6f 75 74 65 72 20 72 65 6c 61 79 6f 6e 30 31 33 34 20 31 38 35 2e 32 32 30 2e 31 30 31 2e 31 33 34 20 31 30 31 33 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 63 44 41 63 32 64 41 6f 68 4b 38 70 7a 6c 6b 34 61 74 55 62 7a 62 77 72 77 58 4e 46 44 46 52 4f 6a 70 43 58 49 38 44 6c 70 4d 38 78 7a 63 41 51 41 67 42 41 43 70 50 67 72 6e 0a 49 7a 65 67 70 59 4e 66 78 68 75 79 69 32 33 4d 46 73 6d 6f 72 67 4c 70 4f 42 55 53 4c 33 57 4c 30 4b 75 6a 2b 67 78 48 76 46 56 44 65 59 67 46 66 76 4b 6a 46 2b 76 67 74 68 79 73 68 75 44 34 0a 6b 43 76 7a 55 48 2b 47 70 39 30 46 33 57 4c 67 72 67 4e 6f 2f 41 71 64 2f 6c 73 71 2b 39 57 47 5a 6f 68 48 76 59 44 75 47 44 6c 2f 76 31 64 48 79 62 67 51 68 67 58 70 36 67 63 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 71 54 34 4b 35 79 4d 33 6f 4b [TRUNCATED] Data Ascii: router relayon0134 185.220.101.134 10134 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1cDAc2dAohK8pzlk4atUbzbwrwXNFDFROjpCXI8DlpM8xzcAQAgBACpPgrnIzegpYNfxhuyi23MFsmorgLpOBUSL3WL0Kuj+gxHvFVDeYgFfvKjF+vgthyshuD4kCvzUH+Gp90F3WLgrgNo/Aqd/lsq+9WGZohHvYDuGDl/v1dHybgQhgXp6gc=-----END ED25519 CERT-----master-key-ed25519 qT4K5yM3oKWDX8YbsottzBbJqK4C6TgVEi91i9Cro/oor-address [2a0b:f4c2:1::134]:10134platform Tor 0.4.8.8 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 05:58:19fingerprint 22CD C8DE 6BE8 A6E6 ED4A 9FAD F667 40B8 F1A2 9DE0uptime 16859072bandwidth 1073741824 1073741824 20278732extra-info-digest 2454C1AD5D492BA98733C657835F145E00C9727B vx1YBWBiB9zc3C6C/sVxGMPKgYRqXLRiPc1ayq36APUonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAJ9uFR3BTKI+YgP4KHvYmjcqmi/qN4dhFEWNOHGi0evFs1mjRPCh4mBVBG3P3CS3H3Ly1uTJq9t3wiRwgMwiJP3DBnAY2ndmGwK4ssmXtIhA7NG+OpHC7I6hqsaQD3 [TRUNCATED]
Nov 3, 2024 09:43:36.818140984 CET	1236	IN	Data Raw: 58 63 44 58 78 48 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d Data Ascii: XcDXxHAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL7yIHa2TO5nzPlp4Lq9Yes/5J3zXQCTmE0D2W570L7NClBK0sIlFd1d/giX/LVh8Ukw+W7gQzYGPM3PFeHR1px9j6U3n+gy0Yz5g2kK5XJmT/niu+ltZskM10CnN6c16StY0lPTHxCOFDY/NM
Nov 3, 2024 09:43:36.818150997 CET	247	IN	Data Raw: 37 4c 43 77 0a 72 6f 75 74 65 72 2d 73 69 67 6e 61 74 75 72 65 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 53 49 47 4e 41 54 55 52 45 2d 2d 2d 2d 2d 0a 6c 39 5a 44 68 4c 66 62 33 43 56 66 6a 4e 4d 38 67 5a 50 49 62 47 52 63 34 52 2b 7a 57 65 49 47 35 51 Data Ascii: 7LCwrouter-signature-----BEGIN SIGNATURE-----l9ZDhLfb3CVfjNM8gZPIbGRc4R+zWeIG5QD4So0K5jsJIgaLGddIfG4fmR6KkclkR4GsArLTUNHz6tVyjRoYapm5sDbOn+xiI9b5zwu2X2GhxBDzS0DB2tGhAKnyBiCw/D07adEg3Pah/DHqwYDqDqtN+HJyWcACB7JYleVg358=-----END SIGNATURE--

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	50082	216.218.219.41	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:56.010694981 CET	292	OUT	GET /tor/server/fp/c9368a555c2c31b9b610cf48de3c4647c84c51ef HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	50083	45.66.35.11	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:56.789664030 CET	289	OUT	GET /tor/server/fp/c9368a555c2c31b9b610cf48de3c4647c84c51ef HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	50084	45.66.35.11	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:57.829313040 CET	289	OUT	GET /tor/server/fp/c9368a555c2c31b9b610cf48de3c4647c84c51ef HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	50087	193.23.244.244	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:59.948199034 CET	292	OUT	GET /tor/server/fp/5c5a8caff797c413678d65a6b4b3f313dc796c75 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:44:01.003082037 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:44:00 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:44:00 GMT Data Raw: 72 6f 75 74 65 72 20 57 65 65 6e 69 65 48 75 74 4a 72 20 31 30 34 2e 32 35 34 2e 31 32 38 2e 32 30 32 20 39 30 30 32 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 65 7a 41 66 46 5a 47 63 33 78 6b 77 59 6b 41 54 59 44 6b 4d 6a 77 43 70 6f 58 6d 78 6c 46 6f 52 5a 71 44 31 52 64 78 30 70 6c 38 6e 59 48 41 51 41 67 42 41 44 58 33 45 57 57 0a 59 6e 36 32 6b 46 61 78 76 76 57 47 31 75 48 61 63 4f 58 6b 31 4f 76 61 4c 38 72 52 44 76 49 5a 32 76 45 32 73 66 42 2f 39 37 45 52 6a 2b 52 70 67 6f 57 76 6d 6f 74 50 42 68 61 34 67 45 61 39 0a 43 4f 4a 76 76 35 34 76 55 51 75 62 32 66 37 65 59 65 63 78 5a 71 75 66 70 69 63 4d 6a 6d 46 47 51 4c 35 30 36 78 39 79 35 64 68 6c 66 5a 6d 56 43 4a 67 75 52 4c 41 75 47 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 31 39 78 46 6c 6d 4a 2b 74 70 42 [TRUNCATED] Data Ascii: router WeenieHutJr 104.254.128.202 9002 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1ezAfFZGc3xkwYkATYDkMjwCpoXmxlFoRZqD1Rdx0pl8nYHAQAgBADX3EWWYn62kFaxvvWG1uHacOXk1OvaL8rRDvIZ2vE2sfB/97ERj+RpgoWvmotPBha4gEa9COJvv54vUQub2f7eYecxZqufpicMjmFGQL506x9y5dhlfZmVCJguRLAuGgg=-----END ED25519 CERT-----master-key-ed25519 19xFlmJ+tpBWsb71htbh2nDl5NTr2i/K0Q7yGdrxNrEplatform Tor 0.4.8.11 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 03:04:56fingerprint 5C5A 8CAF F797 C413 678D 65A6 B4B3 F313 DC79 6C75uptime 7812072bandwidth 1073741824 1073741824 49705015extra-info-digest 86AC3B8E123B506BFDCF42FE3C2448846110A406 6Gj7SpYcTm3TmfOsjK4j5Kk13wD4Y9UcM4MEyxYlyfYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKjqx761foX8U4bzBGTH46p2n9oGou/K7eJFd8CebrSif1FfJzQq5ieLODMk13Tv0xU0WoE3i7OLQ9D3XNN1NzSkC9PYdA8o/61LamJIdDx0ZdYRiQkURlgEfRFqitOhbjsdfwjNJmuDX2z/txShFnnRZB+bstrYQSn [TRUNCATED]
Nov 3, 2024 09:44:01.003324986 CET	1199	IN	Data Raw: 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 6e 36 47 4e 4d 74 43 52 47 75 4b 61 57 4c 78 6b 47 4e 73 31 4f 32 Data Ascii: Y-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANn6GNMtCRGuKaWLxkGNs1O2Uq17tQAA5hHd8rJM+tcOrsgjf3lTfjEyYLIVrrDcwID29sw5Y9wGl+b4aVoY1VktExw7C93lnZRQGmjbjLOYJQ2jEVNvVfTmxc5clrVUlcXzN5qIZhvUuzKKJZBNTINU/sTUhDGURxEt4a0ypp47AgMBAAE=--

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	50088	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:00.343645096 CET	292	OUT	GET /tor/server/fp/87ca50cf8944f8f3793041d3598165a704de41cc HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	50089	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:01.117902040 CET	292	OUT	GET /tor/server/fp/87ca50cf8944f8f3793041d3598165a704de41cc HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	50090	45.66.35.11	80	6508	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:01.339124918 CET	289	OUT	GET /tor/server/fp/cf1c1804c33cd69d8a75587fabc63d5d0e2980fa HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:44:02.383949995 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:44:02 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:44:02 GMT Data Raw: 72 6f 75 74 65 72 20 44 46 52 49 31 30 20 31 37 31 2e 32 35 2e 31 39 33 2e 32 33 34 20 38 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 62 71 41 52 77 2b 5a 51 67 43 42 30 6d 5a 31 6f 59 6e 30 64 7a 54 6a 69 61 51 70 52 4d 30 4b 54 36 6d 49 61 46 47 50 52 78 6c 76 51 68 6e 41 51 41 67 42 41 44 37 32 2b 70 56 0a 4c 6e 6c 33 48 66 4b 59 45 31 43 75 44 4e 5a 76 58 57 70 49 72 63 59 36 78 42 2f 70 69 47 45 51 74 5a 74 43 78 61 73 55 30 74 39 45 78 37 57 6a 4e 77 78 47 66 62 4d 72 54 74 71 4d 61 71 74 49 0a 79 2b 71 69 71 66 61 4c 30 42 38 2f 4f 39 4d 68 75 65 51 38 4b 65 45 52 32 6d 36 54 2f 4a 44 58 45 36 73 47 2b 56 6f 2f 4e 46 53 50 39 67 58 44 62 6d 69 6d 68 6f 6a 6c 55 67 77 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 2b 39 76 71 56 53 35 35 64 78 33 79 6d 42 4e 51 72 67 7a [TRUNCATED] Data Ascii: router DFRI10 171.25.193.234 80 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1bqARw+ZQgCB0mZ1oYn0dzTjiaQpRM0KT6mIaFGPRxlvQhnAQAgBAD72+pVLnl3HfKYE1CuDNZvXWpIrcY6xB/piGEQtZtCxasU0t9Ex7WjNwxGfbMrTtqMaqtIy+qiqfaL0B8/O9MhueQ8KeER2m6T/JDXE6sG+Vo/NFSP9gXDbmimhojlUgw=-----END ED25519 CERT-----master-key-ed25519 +9vqVS55dx3ymBNQrgzWb11qSK3GOsQf6YhhELWbQsUor-address [2001:67c:289c:2::234]:80platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 06:57:47fingerprint CF1C 1804 C33C D69D 8A75 587F ABC6 3D5D 0E29 80FAuptime 90001bandwidth 14680064 209715200 15169536extra-info-digest 01F0C420B33A30C22EA545E29874A582BA937B91 7yPa21NBb0V/NBZUKyM66PA4r6LfEztgzs1kz7yV1Cwonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMfVRUkCbjOFfmDcNqOa1mxdWdmEzoZZqJ6/csEhjCf3/PeSLV8dnnwgvNFcls7vvaRhDxw0xMNB3srbEGduw3xF1AmrMAQEj/3g++Keox15jrHE3ImlZ63MoQ1K54IEcP2f1ixXlzc [TRUNCATED]
Nov 3, 2024 09:44:02.384088993 CET	1236	IN	Data Raw: 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 Data Ascii: =-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAO8yBbCyQaAgGf7gO9wwqhVfNypN03Gx8nE/Ez9JhinRiJN2hHTe4V8SFsZCA6YwuQoiLdDghg68vZ0hQ1gfjC+asist96wU0XFmMdF9JzTdsY0z8pHtnvmBHLNFNHBklkld3lEyUECnjuIzlgYiKBWWbB0tv0M
Nov 3, 2024 09:44:02.384100914 CET	1236	IN	Data Raw: 38 42 32 30 36 32 34 34 46 33 44 45 44 32 42 38 42 43 44 45 41 43 37 34 44 34 38 35 41 30 46 35 42 41 34 39 41 37 39 20 24 35 39 33 33 34 37 33 41 33 35 36 33 43 30 36 36 36 43 35 42 42 38 33 33 43 31 44 42 35 35 33 43 31 46 32 39 36 42 37 34 20 Data Ascii: 8B206244F3DED2B8BCDEAC74D485A0F5BA49A79 $5933473A3563C0666C5BB833C1DB553C1F296B74 $64D74AAA74F30DC2CFB36343CE5D4451B9A4DBA8 $6DFF4CC23DFF46FBCF1CE1168881BB6A7AC09E0B $81F4867EC51E06053346C0226FB82AC8D14BE4D2 $940E1CDEF915CC88B524D34089C8F9764C
Nov 3, 2024 09:44:02.384113073 CET	1236	IN	Data Raw: 70 74 20 2a 3a 34 33 0a 61 63 63 65 70 74 20 2a 3a 35 33 0a 61 63 63 65 70 74 20 2a 3a 37 39 2d 38 31 0a 61 63 63 65 70 74 20 2a 3a 31 39 34 0a 61 63 63 65 70 74 20 2a 3a 32 32 30 0a 61 63 63 65 70 74 20 2a 3a 33 38 39 0a 61 63 63 65 70 74 20 2a Data Ascii: pt :43accept :53accept :79-81accept :194accept :220accept :389accept :443accept :465accept :531accept :543-544accept :554accept :563accept :587accept :636accept :706accept :853accept :873accept :902-904accep
Nov 3, 2024 09:44:02.384130955 CET	447	IN	Data Raw: 32 2c 38 30 38 37 2d 38 30 38 38 2c 38 33 33 32 2d 38 33 33 33 2c 38 34 34 33 2c 38 38 38 38 2c 39 34 31 38 2c 39 39 39 39 2d 31 30 30 30 30 2c 31 31 33 37 31 2c 31 39 32 39 34 2c 31 39 36 33 38 2c 35 30 30 30 32 2c 36 34 37 33 38 0a 74 75 6e 6e Data Ascii: 2,8087-8088,8332-8333,8443,8888,9418,9999-10000,11371,19294,19638,50002,64738tunnelled-dir-serverrouter-sig-ed25519 spCxaXJ/FJwysSn9qjU3uWtAk70WIDoLrqdYhS8oS2oOh9CVlyfiWgPCO0PFc3V/jS3hT3w4FthFNNMK8yuECwrouter-signature-----BEGIN SIGNATURE-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	50091	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:01.914310932 CET	292	OUT	GET /tor/server/fp/87ca50cf8944f8f3793041d3598165a704de41cc HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	50093	193.23.244.244	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:03.897962093 CET	292	OUT	GET /tor/server/fp/dfb0a058b868f239c6b26681ad09a36f94517777 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	50094	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:04.941520929 CET	292	OUT	GET /tor/server/fp/dfb0a058b868f239c6b26681ad09a36f94517777 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	50095	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:05.719818115 CET	292	OUT	GET /tor/server/fp/dfb0a058b868f239c6b26681ad09a36f94517777 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	50097	45.66.35.11	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:08.197001934 CET	289	OUT	GET /tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	50098	216.218.219.41	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:09.259073973 CET	292	OUT	GET /tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	50099	193.23.244.244	80	5876	C:\Users\user\Desktop\Payload 94.75 (3).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:10.047491074 CET	292	OUT	GET /tor/server/fp/c2e3e1a73d46982994551380919f08ec5021a908 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Data Raw: 00 Data Ascii:

Target ID:	0
Start time:	03:41:29
Start date:	03/11/2024
Path:	C:\Users\user\Desktop\Payload 94.75 (3).225.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Payload 94.75 (3).225.exe"
Imagebase:	0x7ff6b1050000
File size:	134'154 bytes
MD5 hash:	702EB701C63B9E10C77E704392D1E924
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	03:41:29
Start date:	03/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	03:41:37
Start date:	03/11/2024
Path:	C:\Users\user\Desktop\Payload 94.75 (3).225.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Payload 94.75 (3).225.exe"
Imagebase:	0x7ff6b1050000
File size:	134'154 bytes
MD5 hash:	702EB701C63B9E10C77E704392D1E924
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	03:41:37
Start date:	03/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	03:41:45
Start date:	03/11/2024
Path:	C:\Users\user\Desktop\Payload 94.75 (3).225.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Payload 94.75 (3).225.exe"
Imagebase:	0x7ff6b1050000
File size:	134'154 bytes
MD5 hash:	702EB701C63B9E10C77E704392D1E924
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	03:41:45
Start date:	03/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	47%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	33.3%
Total number of Nodes:	18
Total number of Limit Nodes:	3

Executed Functions

Function 00007FF6B10527B0 Relevance: 45.6, APIs: 13, Strings: 13, Instructions: 80
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetEnvironmentVariableA.KERNEL32(?,?,?,?,?,?,00007FF6B10510B1), ref: 00007FF6B10527DE
LoadLibraryA.KERNEL32(?,?,?,?,?,?,00007FF6B10510B1), ref: 00007FF6B10527EF
BCryptOpenAlgorithmProvider.BCRYPT(?,?,?,?,?,?,00007FF6B10510B1), ref: 00007FF6B1052809
BCryptSetProperty.BCRYPT ref: 00007FF6B105282F
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6B1052849
BCryptSetProperty.BCRYPT ref: 00007FF6B105286F
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6B10528AA
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6B10528C4
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6B10528DE
BCryptSetProperty.BCRYPT ref: 00007FF6B1052904
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6B105291E
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6B1052938
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6B1052955

Strings

RSA, xrefs: 00007FF6B105287C
RNG, xrefs: 00007FF6B105290D
ECCCurveName, xrefs: 00007FF6B10528F7
ChainingModeECB, xrefs: 00007FF6B1052856
SHA1, xrefs: 00007FF6B1052927
curve25519, xrefs: 00007FF6B10528EB
bcrypt_alt_prov, xrefs: 00007FF6B10527B7
bcrypt_alt.dll, xrefs: 00007FF6B10527E8
AES, xrefs: 00007FF6B10527F8, 00007FF6B1052838
ECDH, xrefs: 00007FF6B10528CD
ChainingMode, xrefs: 00007FF6B1052822, 00007FF6B1052862
SHA256, xrefs: 00007FF6B1052944
ChainingModeCBC, xrefs: 00007FF6B1052816

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: Crypt$AlgorithmOpenProvider$Property$EnvironmentLibraryLoadVariable
String ID: AES$ChainingMode$ChainingModeCBC$ChainingModeECB$ECCCurveName$ECDH$RNG$RSA$SHA1$SHA256$bcrypt_alt.dll$bcrypt_alt_prov$curve25519
API String ID: 2393475537-1894849930
Opcode ID: af65b64e95c7d1159a78f80cdab7d13898f4c9114607b7542d1cf1c4319dcf9a
Instruction ID: 75fc991007e12550ecaaf7e780bf161719c9a2ebe8abd58a5c31aae0fa82528a
Opcode Fuzzy Hash: af65b64e95c7d1159a78f80cdab7d13898f4c9114607b7542d1cf1c4319dcf9a
Instruction Fuzzy Hash: EA41D761E28A5BF1F7109F2CF855A712360FF9A75CF805232C64D9A964EF7CA188C740

Function 00007FF6B1058770 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 133
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6B10564DC: free.MSVCRT ref: 00007FF6B1056540

CryptHashData.ADVAPI32 ref: 00007FF6B1058871

Part of subcall function 00007FF6B1059438: CryptGetHashParam.ADVAPI32 ref: 00007FF6B105948D

free.MSVCRT ref: 00007FF6B1058895
CryptDestroyHash.ADVAPI32 ref: 00007FF6B10588A5
free.MSVCRT ref: 00007FF6B10588B3
free.MSVCRT ref: 00007FF6B10588BE
CryptHashData.ADVAPI32 ref: 00007FF6B1058927
free.MSVCRT ref: 00007FF6B1058932
CryptDestroyHash.ADVAPI32 ref: 00007FF6B1058942
free.MSVCRT ref: 00007FF6B1058950
free.MSVCRT ref: 00007FF6B105895B

Part of subcall function 00007FF6B1059F44: CryptDuplicateHash.ADVAPI32 ref: 00007FF6B1059F6E

Strings

circuit::handle_cell() cannot decrypt relay cell, destroying circuit, xrefs: 00007FF6B10588D1

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$CryptHash$DataDestroy$DuplicateParam
String ID: circuit::handle_cell() cannot decrypt relay cell, destroying circuit
API String ID: 129615695-1619389320
Opcode ID: 0e4997a7559236709232f5b573aafcb6cb6a28d13126fed394d9b4ca2cf9847a
Instruction ID: 8ea870cf35eb9f4f64b289018544733068a4668b0a63bdc1d8b2a55ca8df8f81
Opcode Fuzzy Hash: 0e4997a7559236709232f5b573aafcb6cb6a28d13126fed394d9b4ca2cf9847a
Instruction Fuzzy Hash: 00510732B09B469AEB00DBAAD8905AD3375FB49B9CB105532DF4DA3B58DF34E446C380

Function 00007FF6B105F50C Relevance: 18.1, APIs: 12, Instructions: 121
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 00007FF6B105F563
memmove.MSVCRT ref: 00007FF6B105F592
CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F5B9
free.MSVCRT ref: 00007FF6B105F5C2
CryptCreateHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F5E4
memset.MSVCRT ref: 00007FF6B105F5FF
CryptSetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F612
CryptHashData.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F640
CryptGetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F66B
CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F68A
CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F69D
CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F6B0

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: Crypt$Hash$Destroy$Param$CreateDataImportfreemallocmemmovememset
String ID:
API String ID: 1459146999-0
Opcode ID: 1eda8e85a22471a7f5b96404cd7e2d115c302510c9d3c35d2b0b691f8b058481
Instruction ID: bce0e0888a478128130c4097342980d5443edee8f35da4fa4572d7c6e792f0cf
Opcode Fuzzy Hash: 1eda8e85a22471a7f5b96404cd7e2d115c302510c9d3c35d2b0b691f8b058481
Instruction Fuzzy Hash: 5551AE32B14A5199E710CFB5E8446AE77B0FB85B98F108236DF5E93B54DF389485C740

Function 00007FF6B105B1A4 Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 170
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

free.MSVCRT ref: 00007FF6B105B21B
free.MSVCRT ref: 00007FF6B105B226
free.MSVCRT ref: 00007FF6B105B231

Part of subcall function 00007FF6B105B52C: free.MSVCRT ref: 00007FF6B105B5EC
Part of subcall function 00007FF6B105B52C: free.MSVCRT ref: 00007FF6B105B5F7

memcmp.MSVCRT ref: 00007FF6B105B284

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

free.MSVCRT ref: 00007FF6B105B2EC
free.MSVCRT ref: 00007FF6B105B303
CryptGenRandom.ADVAPI32 ref: 00007FF6B105B336

Strings

circuit::rendezvous_establish() [circuit: %X, state: establishing], xrefs: 00007FF6B105B34B
circuit::rendezvous_establish() [circuit: %X, state: not established], xrefs: 00007FF6B105B3E0
circuit::rendezvous_establish() [circuit: %X, state: established], xrefs: 00007FF6B105B3A8

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$CryptCurrentLocalRandomThreadTime_cwprintf_s_lmemcmp
String ID: circuit::rendezvous_establish() [circuit: %X, state: established]$circuit::rendezvous_establish() [circuit: %X, state: establishing]$circuit::rendezvous_establish() [circuit: %X, state: not established]
API String ID: 2405295690-2993231946
Opcode ID: 68abf2385a1691ecf7a9e765794c2be608ac3189299b3081d743dc1b413c0bc6
Instruction ID: b6b1e4b3b929540a98a427b6d2fe80a2e64734e2a7c70bca81a854d2733e7066
Opcode Fuzzy Hash: 68abf2385a1691ecf7a9e765794c2be608ac3189299b3081d743dc1b413c0bc6
Instruction Fuzzy Hash: 9571A026B14B86A5EB10CF7AD8401ED2362FB89B9CB544232DF5DA7799CF38E146C340

Function 00007FF6B105A9E8 Relevance: 17.7, APIs: 8, Strings: 2, Instructions: 157
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptGenRandom.ADVAPI32 ref: 00007FF6B105AAAF
free.MSVCRT ref: 00007FF6B105AAD9
free.MSVCRT ref: 00007FF6B105AAE4
free.MSVCRT ref: 00007FF6B105AAEF
free.MSVCRT ref: 00007FF6B105AAFA
CryptGenRandom.ADVAPI32 ref: 00007FF6B105AB1F
inet_ntoa.WS2_32 ref: 00007FF6B105AB59
inet_ntoa.WS2_32 ref: 00007FF6B105ABBA

Strings

gfffffff, xrefs: 00007FF6B105AA32
consensus::download_from_random_authority() [path: http://%s:%u%s], xrefs: 00007FF6B105AB89

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$CryptRandominet_ntoa
String ID: consensus::download_from_random_authority() [path: http://%s:%u%s]$gfffffff
API String ID: 3056602706-1112183986
Opcode ID: f098bb04c99aaea78b4a8f1321ace6980adaf6c0b0f70c5d01cbcf369266ded2
Instruction ID: d7c34e1c54e5b7d0a2a87730962e4cc3194c72356b54b29388e6404f3fe24646
Opcode Fuzzy Hash: f098bb04c99aaea78b4a8f1321ace6980adaf6c0b0f70c5d01cbcf369266ded2
Instruction Fuzzy Hash: 1E617D62B14A8596EB00CF7AE8400EC7371FB89BA8B145232EF5D977A9DF38D545C380

Function 00007FF6B1051024 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 24encryptionlibraryCOMMON

Download Yara Rule

APIs

GetEnvironmentVariableA.KERNEL32 ref: 00007FF6B1051034
LoadLibraryA.KERNEL32 ref: 00007FF6B1051045
CryptAcquireContextA.ADVAPI32 ref: 00007FF6B1051069
CryptAcquireContextA.ADVAPI32 ref: 00007FF6B105108D

Strings

Microsoft Enhanced RSA and AES Cryptographic Provider, xrefs: 00007FF6B1051059
Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, xrefs: 00007FF6B105107D
csp_alt_prov, xrefs: 00007FF6B105102B
csp_alt.dll, xrefs: 00007FF6B105103E

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: AcquireContextCrypt$EnvironmentLibraryLoadVariable
String ID: Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider$Microsoft Enhanced RSA and AES Cryptographic Provider$csp_alt.dll$csp_alt_prov
API String ID: 2970050021-3829227113
Opcode ID: f62ba78dc9614071c8427679db8b046114a6aa7efd90225597e5ee3ee1292e32
Instruction ID: d568bcc011591d90ea72f21bae9de685caf186cc3e186891d6a4b2b2810757eb
Opcode Fuzzy Hash: f62ba78dc9614071c8427679db8b046114a6aa7efd90225597e5ee3ee1292e32
Instruction Fuzzy Hash: 05F01920A0894AF2F710DF18FC546A12361BF9A30CF844136D64DC6164CF3CE689CB90

Function 00007FF6B10611FC Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 100encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B105AF6C: malloc.MSVCRT ref: 00007FF6B105AFAA
Part of subcall function 00007FF6B105AF6C: memmove.MSVCRT(?,?,?,00007FF6B105ACE2), ref: 00007FF6B105AFC5
Part of subcall function 00007FF6B105AF6C: free.MSVCRT ref: 00007FF6B105AFCE

free.MSVCRT ref: 00007FF6B10612AC
free.MSVCRT ref: 00007FF6B10612B7
free.MSVCRT ref: 00007FF6B10612C2
CryptGenRandom.ADVAPI32 ref: 00007FF6B10612EE
free.MSVCRT ref: 00007FF6B1061345
free.MSVCRT ref: 00007FF6B1061350

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

Strings

No available routers, xrefs: 00007FF6B1061328

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$CryptCurrentLocalRandomThreadTime_cwprintf_s_lmallocmemmove
String ID: No available routers
API String ID: 980609513-1591776554
Opcode ID: 82c17e569bfc7146f3ca4b0022475d7e0c636ba23d03d9d164123d6f907b8511
Instruction ID: ac2a0b30212062a24c240a08c1764961a0370e9272c4363ae022016a56d05aff
Opcode Fuzzy Hash: 82c17e569bfc7146f3ca4b0022475d7e0c636ba23d03d9d164123d6f907b8511
Instruction Fuzzy Hash: 98413D62B04A46E9EB01DF6AD8842ED3371FB89B98F444132EF0D97A99DF38E555C340

Function 00007FF6B1059A1C Relevance: 6.2, APIs: 4, Instructions: 159encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B10593D8: CryptCreateHash.ADVAPI32 ref: 00007FF6B10593FC

CryptHashData.ADVAPI32 ref: 00007FF6B1059B9E
CryptHashData.ADVAPI32 ref: 00007FF6B1059BC7

Part of subcall function 00007FF6B105A194: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF6B1059C06), ref: 00007FF6B105A223
Part of subcall function 00007FF6B105A194: CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF6B1059C06), ref: 00007FF6B105A250

Part of subcall function 00007FF6B1059F88: memset.MSVCRT ref: 00007FF6B1059FA2

CryptDestroyKey.ADVAPI32 ref: 00007FF6B1059C20
CryptDestroyKey.ADVAPI32 ref: 00007FF6B1059C7D

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: Crypt$Hash$DataDestroy$CreateImportmemmovememset
String ID:
API String ID: 2495588091-0
Opcode ID: 67f9a5d16741bea0056094a5bc2d0f3f450b9bd46a70846716f5d217688e7f1e
Instruction ID: 50738f727c103aaba196d4b6db26222b30e4e0d109c88100f4b7f2f3b5f38c6e
Opcode Fuzzy Hash: 67f9a5d16741bea0056094a5bc2d0f3f450b9bd46a70846716f5d217688e7f1e
Instruction Fuzzy Hash: C8714B33A19B459AE720CF68F88059E73B4F789358F505226EF8D53A58EF78D195CB00

Function 00007FF6B10561EC Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31networkCOMMON

Download Yara Rule

APIs

recv.WS2_32 ref: 00007FF6B1056209
WSAGetLastError.WS2_32 ref: 00007FF6B1056229

Strings

tcp_socket::read_impl recv error: %i, xrefs: 00007FF6B1056232

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: ErrorLastrecv
String ID: tcp_socket::read_impl recv error: %i
API String ID: 2514157807-4185223013
Opcode ID: c3332d0c355d6ade3b773cf13bc7eb517f66c275f5d25a86f53864045fc6f0b8
Instruction ID: 9046cb61b231b63a276404d4f8f377b9bbfbc7900eb54b94eabbcd89916d572c
Opcode Fuzzy Hash: c3332d0c355d6ade3b773cf13bc7eb517f66c275f5d25a86f53864045fc6f0b8
Instruction Fuzzy Hash: F6F03131B18E4BA1DB508B29E59457963A1FF55BFDB105231CB2E87AD4DF3CD4858340

Function 00007FF6B105A194 Relevance: 3.1, APIs: 2, Instructions: 52encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF6B1059C06), ref: 00007FF6B105A223
CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF6B1059C06), ref: 00007FF6B105A250

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptImportmemmove
String ID:
API String ID: 3388866568-0
Opcode ID: dc78ef2b1bb88ca1ef37616fe21c1279fc8b48fc859817bcba4013198a3e70a2
Instruction ID: ab0a2d4f1fdaa394899564cbf24924c9dc560a8452053de64144457c8fe1b0a7
Opcode Fuzzy Hash: dc78ef2b1bb88ca1ef37616fe21c1279fc8b48fc859817bcba4013198a3e70a2
Instruction Fuzzy Hash: 3A218632618B4486D320CF25F84415EB3B8F799BA4B108225EBED83B54DF79E596CB40

Function 00007FF6B105B618 Relevance: 33.6, APIs: 4, Strings: 15, Instructions: 385
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

inet_ntoa.WS2_32 ref: 00007FF6B105B688

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

Part of subcall function 00007FF6B1051BAC: free.MSVCRT ref: 00007FF6B1051BC2

free.MSVCRT ref: 00007FF6B105B8B2
inet_ntoa.WS2_32 ref: 00007FF6B105B916
inet_ntoa.WS2_32 ref: 00007FF6B105B739

Part of subcall function 00007FF6B1056EB4: free.MSVCRT ref: 00007FF6B1056EFA

Strings

Hidden service descriptor is invalid..., xrefs: 00007FF6B105BA18
Sending request for hidden service descriptor..., xrefs: 00007FF6B105B8CD
Connected..., xrefs: 00007FF6B105B6F0
Extending circuit for hidden service, connecting to responsible directory '%s' (%s:%u), xrefs: 00007FF6B105B769
Error while extending the directory circuit, xrefs: 00007FF6B105B7A4
Creating circuit for hidden service (try #%u), connecting to '%s' (%s:%u), xrefs: 00007FF6B105B6C9
/tor/rendezvous2/%s, xrefs: 00007FF6B105B86D
gfffffff, xrefs: 00007FF6B105BB90
Error while establishing the directory stream, xrefs: 00007FF6B105B7FB
Hidden service descriptor contains no introduction points..., xrefs: 00007FF6B105BBAD
Hidden service descriptor is valid..., xrefs: 00007FF6B105BAD4
Extended..., xrefs: 00007FF6B105B7CB
Hidden service descriptor received..., xrefs: 00007FF6B105B98B
hidden_service::fetch_hidden_service_descriptor() [path: %s], xrefs: 00007FF6B105B8BC
404 Not found, xrefs: 00007FF6B105B9C0

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: freeinet_ntoa$CurrentLocalThreadTime_cwprintf_s_l
String ID: Connected...$Creating circuit for hidden service (try #%u), connecting to '%s' (%s:%u)$Error while establishing the directory stream$Error while extending the directory circuit$Extended...$Extending circuit for hidden service, connecting to responsible directory '%s' (%s:%u)$Hidden service descriptor contains no introduction points...$Hidden service descriptor is invalid...$Hidden service descriptor is valid...$Hidden service descriptor received...$Sending request for hidden service descriptor...$/tor/rendezvous2/%s$404 Not found$gfffffff$hidden_service::fetch_hidden_service_descriptor() [path: %s]
API String ID: 1332336199-2986099802
Opcode ID: 299238ed5a642498da61fc5465c70ad0545670cfd1089279fd07c6ed3e0bbcc6
Instruction ID: fe9305294f409a2891cbec94a6f5636319cc7d52042e84267bcb1173ccbac8ef
Opcode Fuzzy Hash: 299238ed5a642498da61fc5465c70ad0545670cfd1089279fd07c6ed3e0bbcc6
Instruction Fuzzy Hash: 7E02BE76A19B85A6EB10DF69D8902EDA361FB89B98F104132DF4D837A9DF3CE545C300

Function 00007FF6B1051160 Relevance: 26.4, APIs: 10, Strings: 5, Instructions: 154
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memcmp.MSVCRT ref: 00007FF6B10511CD
memcmp.MSVCRT ref: 00007FF6B10511FB
memcmp.MSVCRT ref: 00007FF6B105122D
memcmp.MSVCRT ref: 00007FF6B1051260
memcmp.MSVCRT ref: 00007FF6B1051292
GetConsoleWindow.KERNEL32 ref: 00007FF6B10512A5
GetConsoleWindow.KERNELBASE ref: 00007FF6B10512B2
ShowWindow.USER32 ref: 00007FF6B10512BD
free.MSVCRT ref: 00007FF6B105132F
SleepEx.KERNELBASE ref: 00007FF6B1051386

Strings

debug, xrefs: 00007FF6B10511F1
error, xrefs: 00007FF6B1051288
info, xrefs: 00007FF6B1051223
warning, xrefs: 00007FF6B1051256
cached-consensus, xrefs: 00007FF6B10512C8

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memcmp$Window$Console$ShowSleepfree
String ID: cached-consensus$debug$error$info$warning
API String ID: 4256011749-3964234580
Opcode ID: af9853512eb937171acd80e927812a9311f6bca9bcfe36788f3464f537d47cef
Instruction ID: c2aa4157646500fa51cc216e40343bc3d0390cda0f0ea548ada984e803206803
Opcode Fuzzy Hash: af9853512eb937171acd80e927812a9311f6bca9bcfe36788f3464f537d47cef
Instruction Fuzzy Hash: 4B615AA1F08B46EAFB10DF68D8902BC33A1EB4579CF404236DB5DD2699DF78A599C340

Function 00007FF6B105F734 Relevance: 23.1, APIs: 11, Strings: 2, Instructions: 346
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6B1051BAC: free.MSVCRT ref: 00007FF6B1051BC2

malloc.MSVCRT ref: 00007FF6B105F9EB
sscanf.MSVCRT ref: 00007FF6B105FA3C
sscanf.MSVCRT ref: 00007FF6B105FA62
InitializeCriticalSection.KERNEL32 ref: 00007FF6B105FAA3
inet_addr.WS2_32 ref: 00007FF6B105FACB
free.MSVCRT ref: 00007FF6B105FBB8
free.MSVCRT ref: 00007FF6B105FBC3
memset.MSVCRT ref: 00007FF6B105FC3C
sscanf.MSVCRT ref: 00007FF6B105FC77
_mkgmtime.MSVCRT ref: 00007FF6B105FC8F
time.MSVCRT ref: 00007FF6B105FCCA

Strings

gfffffff, xrefs: 00007FF6B105FB82
%04d-%02d-%02d %02d:%02d:%02d, xrefs: 00007FF6B105FC6D

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: freesscanf$CriticalInitializeSection_mkgmtimeinet_addrmallocmemsettime
String ID: %04d-%02d-%02d %02d:%02d:%02d$gfffffff
API String ID: 1162402541-2325642954
Opcode ID: f9d2a9913039bedc1d40d4776bcee5e8e82e2c715d9353d898720981b3426f40
Instruction ID: 77e81d6dc08b71352989e17813a32f0554b86ce5f6608083a53f73c4664d2b35
Opcode Fuzzy Hash: f9d2a9913039bedc1d40d4776bcee5e8e82e2c715d9353d898720981b3426f40
Instruction Fuzzy Hash: 7CF15A72A08B86A6EB10DF79E8902ED73A0FB45758F504236DF5D93AA8EF78D554C300

Function 00007FF6B1061670 Relevance: 19.8, APIs: 2, Strings: 11, Instructions: 309
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memcmp.MSVCRT ref: 00007FF6B106174C

Part of subcall function 00007FF6B1051BAC: free.MSVCRT ref: 00007FF6B1051BC2

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

malloc.MSVCRT ref: 00007FF6B1061956

Strings

.onion, xrefs: 00007FF6B1061788
Error while creating the onion stream, xrefs: 00007FF6B1061AFA
Creating onion stream..., xrefs: 00007FF6B10617F7
Sending request..., xrefs: 00007FF6B1061925
Created..., xrefs: 00007FF6B1061910
Error while establishing TLS with '%s', xrefs: 00007FF6B10619C7
Accessing '%s', xrefs: 00007FF6B1061761
Creating stream..., xrefs: 00007FF6B1061896
Response received..., xrefs: 00007FF6B1061A9A
Received empty response!, xrefs: 00007FF6B1061AA8
https://, xrefs: 00007FF6B1061745

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CurrentLocalThreadTime_cwprintf_s_lfreemallocmemcmp
String ID: .onion$Accessing '%s'$Created...$Creating onion stream...$Creating stream...$Error while creating the onion stream$Error while establishing TLS with '%s'$Received empty response!$Response received...$Sending request...$https://
API String ID: 3650025451-2257922318
Opcode ID: 83f1b3b99ac28d9e7e28ceeb2b0fb490412e44b2ee0a92360e2cba83b5e1f7fa
Instruction ID: 4efd9870399760876767254d8fe3d5ec7d0546534066d09ef638be7f52f22cdd
Opcode Fuzzy Hash: 83f1b3b99ac28d9e7e28ceeb2b0fb490412e44b2ee0a92360e2cba83b5e1f7fa
Instruction Fuzzy Hash: D8E13976B18B85A5EB00CF69E4801AD73B5FB88788B505536EF8D93B58DF38D199C340

Function 00007FF6B1056084 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 86
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

gethostbyname.WS2_32 ref: 00007FF6B10560A2
htons.WS2_32 ref: 00007FF6B10560C1
memmove.MSVCRT(?,?,?,?,?,?,?,00007FF6B10555E6), ref: 00007FF6B10560DD
socket.WS2_32 ref: 00007FF6B10560F2
setsockopt.WS2_32 ref: 00007FF6B105612A
setsockopt.WS2_32 ref: 00007FF6B1056174
connect.WS2_32 ref: 00007FF6B10561A1
WSAGetLastError.WS2_32 ref: 00007FF6B10561AC

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

Strings

tcp_socket::connect setsockopt SO_RCVTIMEO error: %i, xrefs: 00007FF6B1056143
tcp_socket::connect connect error: %i, xrefs: 00007FF6B10561B2
tcp_socket::connect setsockopt SO_SNDTIMEO error: %i, xrefs: 00007FF6B1056181

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: setsockopt$CurrentErrorLastLocalThreadTime_cwprintf_s_lconnectgethostbynamehtonsmemmovesocket
String ID: tcp_socket::connect connect error: %i$tcp_socket::connect setsockopt SO_RCVTIMEO error: %i$tcp_socket::connect setsockopt SO_SNDTIMEO error: %i
API String ID: 2396662901-3524291084
Opcode ID: 7be08767fb85784145f180c7def21f135faac44c599f155fda2d1518468113ad
Instruction ID: 6c0340621804d4bf6985ab3ed2f482f61e3e54760bbfe855137ce5ce72beaafe
Opcode Fuzzy Hash: 7be08767fb85784145f180c7def21f135faac44c599f155fda2d1518468113ad
Instruction Fuzzy Hash: 3541C331B18A46A2E710DF29E4501BA77A1FF85BA8F041231EB5D83B99CF3CD589C740

Function 00007FF6B105EEC0 Relevance: 18.2, APIs: 7, Strings: 5, Instructions: 232
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6B105F50C: malloc.MSVCRT ref: 00007FF6B105F563
Part of subcall function 00007FF6B105F50C: memmove.MSVCRT ref: 00007FF6B105F592
Part of subcall function 00007FF6B105F50C: CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F5B9
Part of subcall function 00007FF6B105F50C: free.MSVCRT ref: 00007FF6B105F5C2
Part of subcall function 00007FF6B105F50C: CryptCreateHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F5E4
Part of subcall function 00007FF6B105F50C: memset.MSVCRT ref: 00007FF6B105F5FF
Part of subcall function 00007FF6B105F50C: CryptSetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F612
Part of subcall function 00007FF6B105F50C: CryptHashData.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F640
Part of subcall function 00007FF6B105F50C: CryptGetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F66B
Part of subcall function 00007FF6B105F50C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F68A

Part of subcall function 00007FF6B105F50C: CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F69D
Part of subcall function 00007FF6B105F50C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F6B0

memcmp.MSVCRT ref: 00007FF6B105F1DF

Part of subcall function 00007FF6B105F2E8: free.MSVCRT ref: 00007FF6B105F45E

free.MSVCRT ref: 00007FF6B105F27C
free.MSVCRT ref: 00007FF6B105F287
free.MSVCRT ref: 00007FF6B105F295
free.MSVCRT ref: 00007FF6B105F2A0
free.MSVCRT ref: 00007FF6B105F2AE
free.MSVCRT ref: 00007FF6B105F2BC

Strings

ntor-curve25519-sha256-1:key_extract, xrefs: 00007FF6B105F1E8
ntor-curve25519-sha256-1:verify, xrefs: 00007FF6B105F08B
ntor-curve25519-sha256-1:mac, xrefs: 00007FF6B105F18A
ntor-curve25519-sha256-1:key_expand, xrefs: 00007FF6B105F20B
Server, xrefs: 00007FF6B105F127

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: Cryptfree$Hash$Destroy$Param$CreateDataImportmallocmemcmpmemmovememset
String ID: Server$ntor-curve25519-sha256-1:key_expand$ntor-curve25519-sha256-1:key_extract$ntor-curve25519-sha256-1:mac$ntor-curve25519-sha256-1:verify
API String ID: 1927060387-216614166
Opcode ID: 12923a258a320d6768868d64f305f561574ce758bd0599a1adf2b30159e9b54c
Instruction ID: a2da22d09669ae907ffc6aa38473494da59aa8d59fd2772db106bd1ed3cb6c05
Opcode Fuzzy Hash: 12923a258a320d6768868d64f305f561574ce758bd0599a1adf2b30159e9b54c
Instruction Fuzzy Hash: F8D1FD32929F8599D7408F68E8805ED73B4FB89758F105226EF8D53B29EF38D194C740

Function 00007FF6B1058974 Relevance: 16.7, APIs: 2, Strings: 9, Instructions: 245
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

free.MSVCRT ref: 00007FF6B1058D2A
free.MSVCRT ref: 00007FF6B1058D35

Strings

(MSB set), xrefs: 00007FF6B10589CF
tor_socket::recv_cell() [circuit: %i%s [%X], stream: %u, command: %u, relay_command: %u, payload_size: %u], xrefs: 00007FF6B1058A06
circuit::handle_extended2_cell() extend node is null, xrefs: 00007FF6B1058C6B
circuit_node::increment_package_window() [ _package_window = %u ], xrefs: 00007FF6B1058A85
tor_stream::increment_package_window() [ _package_window = %u ], xrefs: 00007FF6B1058ABA
tor_socket::recv_cell() !! unhandled relay cell [ relay_command: %u ], xrefs: 00007FF6B1058C16
circuit::handle_relay_truncated_cell() destroying circuit, xrefs: 00007FF6B1058BE6
circuit::handle_relay_end_cell() [stream: %u, reason: %u], xrefs: 00007FF6B1058B6A
circuit::handle_extended2_cell() extend node [ %s ] has invalid crypto state, xrefs: 00007FF6B1058D09

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_l
String ID: (MSB set)$circuit::handle_extended2_cell() extend node [ %s ] has invalid crypto state$circuit::handle_extended2_cell() extend node is null$circuit::handle_relay_end_cell() [stream: %u, reason: %u]$circuit::handle_relay_truncated_cell() destroying circuit$circuit_node::increment_package_window() [ _package_window = %u ]$tor_socket::recv_cell() !! unhandled relay cell [ relay_command: %u ]$tor_socket::recv_cell() [circuit: %i%s [%X], stream: %u, command: %u, relay_command: %u, payload_size: %u]$tor_stream::increment_package_window() [ _package_window = %u ]
API String ID: 2601393797-2081185039
Opcode ID: 68f0606742a62c8022c18a34e07ac590f3e8573c870fcabaa0959e88f642d64e
Instruction ID: f7ff22fe0302715301ffa07f8c94c2aabe3b27209fd6ab7c09ae2597942def16
Opcode Fuzzy Hash: 68f0606742a62c8022c18a34e07ac590f3e8573c870fcabaa0959e88f642d64e
Instruction Fuzzy Hash: 85B1CF72A0C74AA2E7149B6EE4801BD67A1FB45B98F508136DF5E97B98DF3CE405C700

Function 00007FF6B1061374 Relevance: 16.0, APIs: 2, Strings: 7, Instructions: 201
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

inet_ntoa.WS2_32 ref: 00007FF6B10613BB
inet_ntoa.WS2_32 ref: 00007FF6B1061514

Strings

Connected..., xrefs: 00007FF6B10614E4
Extended..., xrefs: 00007FF6B10615DB
Error while creating circuit!, xrefs: 00007FF6B10614F2
Connecting to node #%u: '%s' (%s:%u), xrefs: 00007FF6B106140E
Error when extending!, xrefs: 00007FF6B1061639
Error while connecting!, xrefs: 00007FF6B1061503
Extending to node #%u: '%s' (%s:%u), xrefs: 00007FF6B1061567

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: inet_ntoa
String ID: Connected...$Connecting to node #%u: '%s' (%s:%u)$Error when extending!$Error while connecting!$Error while creating circuit!$Extended...$Extending to node #%u: '%s' (%s:%u)
API String ID: 1879540557-1880961314
Opcode ID: 2f5d3c72ddf16f39949876de8068995141031c3f6cc6b9db1aceabb79353ce63
Instruction ID: 818e5b15ad06a4faa7501d4c68ccb3189fa93fcf641b1981c1aec9cea91a480a
Opcode Fuzzy Hash: 2f5d3c72ddf16f39949876de8068995141031c3f6cc6b9db1aceabb79353ce63
Instruction Fuzzy Hash: 65919036B18B45D6EB10CF5AD4402AD73A1FB88B98B584136DB5E93794DF3CE891C340

Function 00007FF6B10513B4 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 164
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNEL32 ref: 00007FF6B10513F4
RegOpenKeyExA.KERNELBASE ref: 00007FF6B1051423
RegQueryInfoKeyA.ADVAPI32 ref: 00007FF6B1051472
RegCloseKey.ADVAPI32 ref: 00007FF6B1051481
RegEnumValueA.KERNELBASE ref: 00007FF6B1051509
free.MSVCRT ref: 00007FF6B10515BE
RegSetValueExA.KERNELBASE ref: 00007FF6B10515F1
RegCloseKey.KERNELBASE ref: 00007FF6B10515FC

Strings

SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xrefs: 00007FF6B1051415

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CloseValue$EnumFileInfoModuleNameOpenQueryfree
String ID: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
API String ID: 2654051921-3913687870
Opcode ID: 1455328c164cbbab17e77a29b99fbfce9f7e0c9dabde878686b1bb21995df690
Instruction ID: 2683e3c156f8d77bf404804ea32ef27a73dbb03ad5dbe69363110ea882c4f35f
Opcode Fuzzy Hash: 1455328c164cbbab17e77a29b99fbfce9f7e0c9dabde878686b1bb21995df690
Instruction Fuzzy Hash: E9714C32A18B45D9E710CF69E8905AE77B5FB89798F100235EB9D93BA8DF38D580C740

Function 00007FF6B1062600 Relevance: 15.2, APIs: 3, Strings: 7, Instructions: 201
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

sscanf.MSVCRT ref: 00007FF6B106277C
malloc.MSVCRT ref: 00007FF6B10627F9
free.MSVCRT ref: 00007FF6B106287A

Part of subcall function 00007FF6B1051ED0: free.MSVCRT ref: 00007FF6B1051F12

Strings

%s, xrefs: 00007FF6B106268D
gfffffff, xrefs: 00007FF6B1062898
bad URL info: %s, xrefs: 00007FF6B1062742
gfffffff, xrefs: 00007FF6B1062701
http://pm2pavba27wr4m34.onion/command.txt?smbdff, xrefs: 00007FF6B106266A
Get pings..., xrefs: 00007FF6B1062648
cached-consensus, xrefs: 00007FF6B106260D

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_lmallocsscanf
String ID: %s$Get pings...$bad URL info: %s$cached-consensus$gfffffff$gfffffff$http://pm2pavba27wr4m34.onion/command.txt?smbdff
API String ID: 3228243443-4187490567
Opcode ID: 027f509a526a3e17d2a3131e147457e7f805d030cc6bf360b62f4f4c9f93263c
Instruction ID: d175187f1d6ca487892b211b191e9f62724bd2c7c8d2b734a0dd80bc821cc98e
Opcode Fuzzy Hash: 027f509a526a3e17d2a3131e147457e7f805d030cc6bf360b62f4f4c9f93263c
Instruction Fuzzy Hash: A6915C76A05B49A6EB10CF69E4803AD7360FB48798F504636EB9D977A4DF38E189C340

Function 00007FF6B105CB30 Relevance: 13.7, APIs: 4, Strings: 5, Instructions: 211COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6B105CBC0
free.MSVCRT ref: 00007FF6B105CD56
free.MSVCRT ref: 00007FF6B105CE00
free.MSVCRT ref: 00007FF6B105CE0B

Strings

socket_buffer.read(circuit_id_v3) != sizeof(circuit_id_v3_type), xrefs: 00007FF6B105CBA1
socket_buffer.read(command) != sizeof(cell_command), xrefs: 00007FF6B105CC3A
socket_buffer.read(circuit_id) != sizeof(circuit_id_type), xrefs: 00007FF6B105CCA3
socket_buffer.read<payload_size_type>(payload_size) != sizeof(payload_size_type), xrefs: 00007FF6B105CCD7
socket_buffer.read(payload.get_buffer(), payload_size) != payload_size, xrefs: 00007FF6B105CD3C

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$memset
String ID: socket_buffer.read(circuit_id) != sizeof(circuit_id_type)$socket_buffer.read(circuit_id_v3) != sizeof(circuit_id_v3_type)$socket_buffer.read(command) != sizeof(cell_command)$socket_buffer.read(payload.get_buffer(), payload_size) != payload_size$socket_buffer.read<payload_size_type>(payload_size) != sizeof(payload_size_type)
API String ID: 2717317152-1323880483
Opcode ID: 7a5c7e82705b032cd5ce8c0dc82605f49950aa94e68af44cc18e759bc1702ad9
Instruction ID: 3bf006e8fdc202a5bb6e13754b497469a1186300832647c71a7697d02c9666de
Opcode Fuzzy Hash: 7a5c7e82705b032cd5ce8c0dc82605f49950aa94e68af44cc18e759bc1702ad9
Instruction Fuzzy Hash: DC91BC66B09A85AAE710CF78D5801AC3BB5FB44BACB144235DF6DA3B98CF38D455C340

Function 00007FF6B105715C Relevance: 13.7, APIs: 4, Strings: 5, Instructions: 159COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6B1057266
free.MSVCRT ref: 00007FF6B105734E

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

Strings

circuit::create_ntor() [or: %s, state: destroyed], xrefs: 00007FF6B1057390
circuit::create_ntor() [or: %s does not support NTOR handshake], xrefs: 00007FF6B10571AD
circuit::create_ntor() [or: %s, state: creating], xrefs: 00007FF6B10571C3
circuit::create_ntor() [or: %s, state: created], xrefs: 00007FF6B1057380
circuit::create_ntor() extend node isn't null, xrefs: 00007FF6B10571F6

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_l
String ID: circuit::create_ntor() [or: %s does not support NTOR handshake]$circuit::create_ntor() [or: %s, state: created]$circuit::create_ntor() [or: %s, state: creating]$circuit::create_ntor() [or: %s, state: destroyed]$circuit::create_ntor() extend node isn't null
API String ID: 2601393797-3117506111
Opcode ID: 38d2a26d85f817dcbbfd02b6f0725381c80af3c005963db85d31fae66aad0ec0
Instruction ID: 8dde106fc557fab92936e364dcecfd373956f37bb7b2cf7830cc348c4de7a22b
Opcode Fuzzy Hash: 38d2a26d85f817dcbbfd02b6f0725381c80af3c005963db85d31fae66aad0ec0
Instruction Fuzzy Hash: BB717A26A08B4AA5EB10DB69E4802ED73B5FB8879CF408136EF5D93799DF38D545C340

Function 00007FF6B105C5C0 Relevance: 13.6, APIs: 5, Strings: 4, Instructions: 146COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6B105C603
free.MSVCRT ref: 00007FF6B105C715
free.MSVCRT ref: 00007FF6B105C743

Strings

tor_socket::send_versions(), xrefs: 00007FF6B105C6BB
Invalid handshake, xrefs: 00007FF6B105C749
tor_socket::recv_net_info(), xrefs: 00007FF6B105C797
tor_socket::recv_versions(), xrefs: 00007FF6B105C71B

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$malloc
String ID: Invalid handshake$tor_socket::recv_net_info()$tor_socket::recv_versions()$tor_socket::send_versions()
API String ID: 2190258309-3974360583
Opcode ID: 5f05d8104c6d42dc6ff0738b48de0209f7bfc35637d1eab501257198e85cd96b
Instruction ID: 40f9482abd0e2ea54de01ca9bb71b88619aea2102dc572fbfcc466f19f19fec6
Opcode Fuzzy Hash: 5f05d8104c6d42dc6ff0738b48de0209f7bfc35637d1eab501257198e85cd96b
Instruction Fuzzy Hash: D251BC22A18A56A5FB04DB69CA901FC23A5FF89B9CF044136DF4E97B95DF3CA446C340

Function 00007FF6B10573E0 Relevance: 12.3, APIs: 3, Strings: 5, Instructions: 271COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6B10574ED

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

Strings

circuit::extend_ntor() [or: %s, state: extended], xrefs: 00007FF6B1057766
circuit::extend_ntor() extend node isn't null, xrefs: 00007FF6B1057478
circuit::extend_ntor() [or: %s, state: destroyed], xrefs: 00007FF6B1057776
circuit::extend_ntor() [or: %s does not support NTOR handshake], xrefs: 00007FF6B105742C
circuit::extend_ntor() [or: %s, state: extending], xrefs: 00007FF6B1057444

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CurrentLocalThreadTime_cwprintf_s_lfree
String ID: circuit::extend_ntor() [or: %s does not support NTOR handshake]$circuit::extend_ntor() [or: %s, state: destroyed]$circuit::extend_ntor() [or: %s, state: extended]$circuit::extend_ntor() [or: %s, state: extending]$circuit::extend_ntor() extend node isn't null
API String ID: 489237203-3214179444
Opcode ID: 5a428da88bb0e024e79c47924de6936ce8e8045a8009a3291595675c8eb9a764
Instruction ID: 1e323192ce236579e7d3c1e0ae6aae105c03e201b80587fc0ca6d88049b520c5
Opcode Fuzzy Hash: 5a428da88bb0e024e79c47924de6936ce8e8045a8009a3291595675c8eb9a764
Instruction Fuzzy Hash: 30C16262B04A85AAEB00CF79D4842EC77B1FB447ACB544232DF6D97B99EE38D104C340

Function 00007FF6B1055A8C Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 125COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6B1055B11
malloc.MSVCRT ref: 00007FF6B1055B23
InitSecurityInterfaceA.SECUR32 ref: 00007FF6B1055B40
atexit.MSVCRT ref: 00007FF6B1055B54
memset.MSVCRT ref: 00007FF6B1055C54

Strings

Microsoft Unified Security Protocol Provider, xrefs: 00007FF6B1055C92

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: malloc$InitInterfaceSecurityatexitmemset
String ID: Microsoft Unified Security Protocol Provider
API String ID: 1208695405-238809041
Opcode ID: 38a593e33b74e37f6712afdede6384cbb317d90272e0a9a88835ddb955178c7a
Instruction ID: 097a078504b6c2ac01057e12953cfd945f7f6d8d40a5c4f76da731c8e91dab63
Opcode Fuzzy Hash: 38a593e33b74e37f6712afdede6384cbb317d90272e0a9a88835ddb955178c7a
Instruction Fuzzy Hash: A651F272A04B819AE3508F68E84039D37B9F749B68F148639DF9D97798EF38C1A4C350

Function 00007FF6B105A454 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 153COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE ref: 00007FF6B105A4A9
free.MSVCRT ref: 00007FF6B105A5C7
time.MSVCRT ref: 00007FF6B105A5FC

Strings

/tor/status-vote/current/consensus, xrefs: 00007FF6B105A4C6
cached-consensus, xrefs: 00007FF6B105A460

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: AttributesFilefreetime
String ID: /tor/status-vote/current/consensus$cached-consensus
API String ID: 1606450062-1934959206
Opcode ID: b77536e4a368fe57b92b19f918300b51dbfd990027d5421a67bc41e780187365
Instruction ID: c5a6b3a0715e28d61dd5fc61a7a4551246902c1efd04289a0f091e8f35b2d615
Opcode Fuzzy Hash: b77536e4a368fe57b92b19f918300b51dbfd990027d5421a67bc41e780187365
Instruction Fuzzy Hash: 97613922F05B45A9E700CFA9D4801AC7772BB48B5CB144536DF4DA7BA8DF38D595D380

Function 00007FF6B1057F08 Relevance: 7.6, APIs: 2, Strings: 3, Instructions: 117COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6B1058087
free.MSVCRT ref: 00007FF6B1058092

Strings

(MSB set), xrefs: 00007FF6B1057FE4
circuit::send_relay_cell() attempt to send cell to non-existent stream-id: %u, xrefs: 00007FF6B1057FB8
tor_socket::send_cell() [circuit: %i%s [%X], stream: %u, command: %i, relay_command: %i], xrefs: 00007FF6B1058018

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free
String ID: (MSB set)$circuit::send_relay_cell() attempt to send cell to non-existent stream-id: %u$tor_socket::send_cell() [circuit: %i%s [%X], stream: %u, command: %i, relay_command: %i]
API String ID: 1294909896-2545454300
Opcode ID: bfda03fc43caedb43a0a2df481743842a09e31089daf7bbe2872fdba922eb25b
Instruction ID: 15bae327246f422feddabd069289064eafe475fbfb0481a951ae83f8af2dd500
Opcode Fuzzy Hash: bfda03fc43caedb43a0a2df481743842a09e31089daf7bbe2872fdba922eb25b
Instruction Fuzzy Hash: 1C51DD32A08A85AAE710DF39D4405AD77B0FB987ACB454236EF5D93BA8CF38D546C740

Function 00007FF6B105227C Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(?,?,?,00007FF6B1052356), ref: 00007FF6B1052295
CommandLineToArgvW.SHELL32(?,?,?,00007FF6B1052356), ref: 00007FF6B10522A5
malloc.MSVCRT ref: 00007FF6B10522B9
malloc.MSVCRT ref: 00007FF6B10522ED
wcstombs.MSVCRT(?,?,?,00007FF6B1052356), ref: 00007FF6B105230E

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CommandLinemalloc$Argvwcstombs
String ID:
API String ID: 175250670-0
Opcode ID: 636ccd5f01464c353baf4956920b5dbdc711e6a3ba087fd24f89c0110948d378
Instruction ID: 4c387c225be32dd1c89bb1571fdb43713c7ad616448ed29d6163f6bcfb74233c
Opcode Fuzzy Hash: 636ccd5f01464c353baf4956920b5dbdc711e6a3ba087fd24f89c0110948d378
Instruction Fuzzy Hash: FD113A75A08A8AE6EB008F19E9440687361FB45FD8B045232DB9ED77A4DF3CE495C340

Function 00007FF6B105CE54 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 176COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

time.MSVCRT ref: 00007FF6B105CE9A
free.MSVCRT ref: 00007FF6B105D088
free.MSVCRT ref: 00007FF6B105D097

Strings

tor_socket::send_net_info(), xrefs: 00007FF6B105CE7D

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_ltime
String ID: tor_socket::send_net_info()
API String ID: 1526019956-2499986577
Opcode ID: 4b4a00105c91061791b20dd07689f6db070400c8b5b045023e03a3460761ff27
Instruction ID: 96955ef4331e38e57f045fea686e3bb47fee5f528cad89de229d85ac9571b944
Opcode Fuzzy Hash: 4b4a00105c91061791b20dd07689f6db070400c8b5b045023e03a3460761ff27
Instruction Fuzzy Hash: F3715A72B05A8599EB00CF78D5881DC77B6FB44BACB400675DF2D97A99EE34E105C340

Function 00007FF6B1060640 Relevance: 6.5, APIs: 5, Instructions: 268COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 7e04c8231644cdf8af379600980c890e8f9b35988d9995a7196225203ece5fdf
Instruction ID: 3be7e5967fce2b91d1f3ba0452bb622152853ebdc15d4eaef0c611e08a2effa6
Opcode Fuzzy Hash: 7e04c8231644cdf8af379600980c890e8f9b35988d9995a7196225203ece5fdf
Instruction Fuzzy Hash: 79D12F72A18B8595EB20CF69E4902EDB371FB89798F504236EB8D93B58DF38D584C740

Function 00007FF6B10584F8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 00007FF6B1058515

Part of subcall function 00007FF6B105D174: free.MSVCRT ref: 00007FF6B105D36A

GetTickCount.KERNEL32 ref: 00007FF6B1058535

Strings

timeout, xrefs: 00007FF6B1058545

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CountTick$free
String ID: timeout
API String ID: 3830800293-743945614
Opcode ID: a843a3b3c3fdee5c26c8a67a571f9f632852569d43a96ac9fa005f468c406e27
Instruction ID: 16227a1893d0769365b31c0c86f25b050dfa042852b8471a41d31876c3245cfe
Opcode Fuzzy Hash: a843a3b3c3fdee5c26c8a67a571f9f632852569d43a96ac9fa005f468c406e27
Instruction Fuzzy Hash: 7101403191CA42A6EB50DB2EA44517973A0FB4479CF644136EB5AC6699DE3CD481C740

Function 00007FF6B1055040 Relevance: 5.2, APIs: 4, Instructions: 154COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6B105508F
memmove.MSVCRT ref: 00007FF6B10550C8
memmove.MSVCRT ref: 00007FF6B10550E2
memmove.MSVCRT ref: 00007FF6B1055243

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 0e96a470ea1b116213d40ff051803324fdfead90807640f7877918efa3eac510
Instruction ID: acb304c505a97d9d03e30a0cb9f1ad37b325adaeabb8daaf6348440d42eb2097
Opcode Fuzzy Hash: 0e96a470ea1b116213d40ff051803324fdfead90807640f7877918efa3eac510
Instruction Fuzzy Hash: 6E719F32B15B85A6EB58CBA9C5847AC73A4F705B98F148236DB2C57794DF38E4A5C300

Function 00007FF6B105F2E8 Relevance: 5.1, APIs: 4, Instructions: 138COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B105F50C: malloc.MSVCRT ref: 00007FF6B105F563
Part of subcall function 00007FF6B105F50C: memmove.MSVCRT ref: 00007FF6B105F592
Part of subcall function 00007FF6B105F50C: CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F5B9
Part of subcall function 00007FF6B105F50C: free.MSVCRT ref: 00007FF6B105F5C2
Part of subcall function 00007FF6B105F50C: CryptCreateHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F5E4
Part of subcall function 00007FF6B105F50C: memset.MSVCRT ref: 00007FF6B105F5FF
Part of subcall function 00007FF6B105F50C: CryptSetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F612
Part of subcall function 00007FF6B105F50C: CryptHashData.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F640
Part of subcall function 00007FF6B105F50C: CryptGetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F66B
Part of subcall function 00007FF6B105F50C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F68A

Part of subcall function 00007FF6B1058E7C: memmove.MSVCRT ref: 00007FF6B1058ED3

Part of subcall function 00007FF6B105F50C: CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F69D
Part of subcall function 00007FF6B105F50C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6B105F0C4), ref: 00007FF6B105F6B0

free.MSVCRT ref: 00007FF6B105F45E
free.MSVCRT ref: 00007FF6B105F4A5
free.MSVCRT ref: 00007FF6B105F4C0
free.MSVCRT ref: 00007FF6B105F4DB

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: Crypt$Hash$free$Destroy$Parammemmove$CreateDataImportmallocmemset
String ID:
API String ID: 3037252780-0
Opcode ID: 24566aaef209d1f1ae97e956c7e563538cc152ba538bb54a01a448dd4d2a3888
Instruction ID: 1bd3ecb73d3db8dfed9c0610de6c43408b0d8b44d7acf71a83a66c0a6e42a20b
Opcode Fuzzy Hash: 24566aaef209d1f1ae97e956c7e563538cc152ba538bb54a01a448dd4d2a3888
Instruction Fuzzy Hash: B7516033A18BC596E7018F69E8400ADB7B4FB88B58F255225EFD863B68DF38D585C740

Function 00007FF6B1061B4C Relevance: 4.8, APIs: 1, Strings: 2, Instructions: 257COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6B1061F43

Part of subcall function 00007FF6B1051BAC: free.MSVCRT ref: 00007FF6B1051BC2

Strings

Trying to build new circuit..., xrefs: 00007FF6B1061F1E
cached-consensus, xrefs: 00007FF6B1061B5E

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free
String ID: Trying to build new circuit...$cached-consensus
API String ID: 1294909896-1511346022
Opcode ID: a540f052a4bf91f77e1f001d1ab97ae808b83c015898cbaef9eba513ffd7a7d1
Instruction ID: abbebc034f742e889f29d207d382061184de6a1e900ae95efde56686b6df7aa9
Opcode Fuzzy Hash: a540f052a4bf91f77e1f001d1ab97ae808b83c015898cbaef9eba513ffd7a7d1
Instruction Fuzzy Hash: 03C14932619BC991DB60CF18E4842AEB3A4FBD9B94F504236DB9D83768EF38C595C740

Function 00007FF6B105D174 Relevance: 4.7, APIs: 1, Strings: 2, Instructions: 155COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B105CB30: memset.MSVCRT ref: 00007FF6B105CBC0

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

free.MSVCRT ref: 00007FF6B105D36A

Strings

tor_socket::recv_cell_iteration() !! received cell for non-existent circuit-id: %X, xrefs: 00007FF6B105D30C
tor_socket::recv_cell_iteration() !! received invalid cell, closing stream, xrefs: 00007FF6B105D1B3

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CurrentLocalThreadTime_cwprintf_s_lfreememset
String ID: tor_socket::recv_cell_iteration() !! received cell for non-existent circuit-id: %X$tor_socket::recv_cell_iteration() !! received invalid cell, closing stream
API String ID: 1383866297-1620486077
Opcode ID: 8954b711d551f775696c38e1bc500b75639c1c60fe567dc30485a637de1f731a
Instruction ID: 6716287e02ea8a04d721964590f75b246c1b3309c789c6c86c0c971548dbe9e4
Opcode Fuzzy Hash: 8954b711d551f775696c38e1bc500b75639c1c60fe567dc30485a637de1f731a
Instruction Fuzzy Hash: 97615B76B05B45AAEB108F69C4802AC33A0FB58BACB188236DF5D97795DF3CD942C740

Function 00007FF6B1056B30 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 119COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B1052B6C: memmove.MSVCRT ref: 00007FF6B1052C28
Part of subcall function 00007FF6B1052B6C: memmove.MSVCRT ref: 00007FF6B1052C5A
Part of subcall function 00007FF6B1052B6C: memmove.MSVCRT ref: 00007FF6B1052CB7

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

Part of subcall function 00007FF6B105B1A4: free.MSVCRT ref: 00007FF6B105B21B
Part of subcall function 00007FF6B105B1A4: free.MSVCRT ref: 00007FF6B105B226
Part of subcall function 00007FF6B105B1A4: free.MSVCRT ref: 00007FF6B105B231
Part of subcall function 00007FF6B105B1A4: memcmp.MSVCRT ref: 00007FF6B105B284
Part of subcall function 00007FF6B105B1A4: free.MSVCRT ref: 00007FF6B105B2EC
Part of subcall function 00007FF6B105B1A4: free.MSVCRT ref: 00007FF6B105B303

free.MSVCRT ref: 00007FF6B1056CC2
free.MSVCRT ref: 00007FF6B1056CCD

Strings

hidden_service() [%s.onion], xrefs: 00007FF6B1056BF6

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$memmove$CurrentLocalThreadTime_cwprintf_s_lmemcmp
String ID: hidden_service() [%s.onion]
API String ID: 1173836548-1866994827
Opcode ID: adb0adcafac603fc298780b858552ae719cd0e9447c454434c842e451503e9e0
Instruction ID: 0cded082401d69dc0ab55570ca4025f77163fb3d32c378da764ccd96ed41bcd5
Opcode Fuzzy Hash: adb0adcafac603fc298780b858552ae719cd0e9447c454434c842e451503e9e0
Instruction Fuzzy Hash: 5B51A073A18B8596E7008F69E8803ADB370FB99798F109236EB8D53699DF3CD594C740

Function 00007FF6B105FD2C Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 118COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6B105FDCD
free.MSVCRT ref: 00007FF6B105FE51

Strings

gfffffff, xrefs: 00007FF6B105FD5E

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: freemalloc
String ID: gfffffff
API String ID: 3061335427-1523873471
Opcode ID: 86f470d866c19a3d27ccb290473b9796c206d4d6b0d409844dc9c324ddee08c5
Instruction ID: 14f608cf8fd5f28c97a0dff302138b106247667b5854ef68512aeed4fd3e31ff
Opcode Fuzzy Hash: 86f470d866c19a3d27ccb290473b9796c206d4d6b0d409844dc9c324ddee08c5
Instruction Fuzzy Hash: F95113B6A05F8892DB04CF56E8803A873A4F358BD8F108626EF9D87754DF38D5A5C380

Function 00007FF6B105AF6C Relevance: 3.8, APIs: 3, Instructions: 38COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6B105AFAA
memmove.MSVCRT(?,?,?,00007FF6B105ACE2), ref: 00007FF6B105AFC5
free.MSVCRT ref: 00007FF6B105AFCE

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: freemallocmemmove
String ID:
API String ID: 2537350866-0
Opcode ID: 5dcd7114bfb6fa35e1af2df3079a7d1cc525782d55b503cc12c2a0544ff820e6
Instruction ID: bfa1aba6fdb5ee230532c7a9ad9f4e39ffa8f2a7bc52f2e39f9c5fd34f8d31cd
Opcode Fuzzy Hash: 5dcd7114bfb6fa35e1af2df3079a7d1cc525782d55b503cc12c2a0544ff820e6
Instruction Fuzzy Hash: 5E018072A14F85D5CB00CF6AE44009D7760F748BE8724863AEB6D177A8CF38D592C380

Function 00007FF6B1055F5C Relevance: 3.0, APIs: 2, Instructions: 30networkCOMMON

Download Yara Rule

APIs

WSAStartup.WS2_32 ref: 00007FF6B1055FBE
atexit.MSVCRT ref: 00007FF6B1055FCB

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: Startupatexit
String ID:
API String ID: 549365519-0
Opcode ID: 1bf13692371352bfd15b774ffdfae1294fdaf6b15dec19a6de1046441a577007
Instruction ID: ebd4fd0668bfb31b4a46449f0891e634b422f6addd562acb708d408fbf147e7f
Opcode Fuzzy Hash: 1bf13692371352bfd15b774ffdfae1294fdaf6b15dec19a6de1046441a577007
Instruction Fuzzy Hash: D201E572919B06A5DB108F68E88006973A8FB45738B604335DBBD873E4EF38D596C344

Function 00007FF6B105D91C Relevance: 2.6, APIs: 2, Instructions: 65COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6B105D987
free.MSVCRT ref: 00007FF6B105D9EA

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: freememmove
String ID:
API String ID: 2988784210-0
Opcode ID: 306bae5263a8b46ae2a72b77629c5c75bff5815b72462ade1109813f80933c43
Instruction ID: 0993402f5052541bdae6a578755d6ed8264c276b7f594b18af83da8c9a58aba3
Opcode Fuzzy Hash: 306bae5263a8b46ae2a72b77629c5c75bff5815b72462ade1109813f80933c43
Instruction Fuzzy Hash: AC312676B10B50A6EB04CB6AE9800AC7775F748B98B189236DF5DA3B58CF34E4B1C340

Function 00007FF6B10520F8 Relevance: 2.6, APIs: 2, Instructions: 62COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6B105213E
free.MSVCRT ref: 00007FF6B10521B5

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: f5f5b6a4d2f0d5135d721687da0bf41553a4098c9452ff204767c330f2461de7
Instruction ID: d4ad2b24683ed4892f08d4717c2016f5f579a873a6876dadf1edf6e66580864f
Opcode Fuzzy Hash: f5f5b6a4d2f0d5135d721687da0bf41553a4098c9452ff204767c330f2461de7
Instruction Fuzzy Hash: 0D21D576A05F48C6D7048F59E884259B3A4F358FE8F24462ADBAD47394DF34D5E6C380

Function 00007FF6B105B0D0 Relevance: 2.6, APIs: 2, Instructions: 60COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6B105B11D

Part of subcall function 00007FF6B1059A1C: CryptHashData.ADVAPI32 ref: 00007FF6B1059B9E

free.MSVCRT ref: 00007FF6B105B18B

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDataHashfreemalloc
String ID:
API String ID: 4030236771-0
Opcode ID: cef6c3e9a7d39f99ca6416cacb2f29e19eae2ad2c4857f0904ca00c4241dad3b
Instruction ID: 7e2daae6989147040015792b667c22f9c416be649d051df876fbbe052f492434
Opcode Fuzzy Hash: cef6c3e9a7d39f99ca6416cacb2f29e19eae2ad2c4857f0904ca00c4241dad3b
Instruction Fuzzy Hash: B2214D72B04B559AEB00CFA9E8800AC3370F748B58B544639EF6EA3B98DF74D591C340

Function 00007FF6B105C23C Relevance: 2.5, APIs: 2, Instructions: 49COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF6B105C263
LeaveCriticalSection.KERNEL32 ref: 00007FF6B105C2E4

Part of subcall function 00007FF6B1051BAC: free.MSVCRT ref: 00007FF6B1051BC2

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CriticalSection$EnterLeavefree
String ID:
API String ID: 4020351045-0
Opcode ID: b6968b0227711e3c7f80869c3732d6949c215d8694a92192990848c797e2a0b8
Instruction ID: d6b465469fb94559dc681a75ec71da8ce7ac767ca0af30601033736030f10620
Opcode Fuzzy Hash: b6968b0227711e3c7f80869c3732d6949c215d8694a92192990848c797e2a0b8
Instruction Fuzzy Hash: C2114D62F24B6598FB00CBB8E8801EC27B4FB59BACF145225DF5E66699DF38C085C340

Function 00007FF6B1052074 Relevance: 2.5, APIs: 2, Instructions: 34COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6B10520A6
free.MSVCRT ref: 00007FF6B10520C6

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 29a94146242592d2ea7c2d3ce73e1b5b208061a74b2266fd5f183d0677e13107
Instruction ID: 7347234dc3d09c9a116813696976a9aaf0f57edabf31639022f48af6ab79d03e
Opcode Fuzzy Hash: 29a94146242592d2ea7c2d3ce73e1b5b208061a74b2266fd5f183d0677e13107
Instruction Fuzzy Hash: 45010876615B86D6CB148F6AF58006AB370F748FD8B248436DB9E47729DF38D592C380

Function 00007FF6B1054B20 Relevance: 1.6, APIs: 1, Instructions: 81fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B1051BAC: free.MSVCRT ref: 00007FF6B1051BC2

CreateFileA.KERNELBASE ref: 00007FF6B1054C27

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CreateFilefree
String ID:
API String ID: 1298414175-0
Opcode ID: bbb8ff4d5c3531b8b00622756c31061359b7f49f36ba3359dd9df7116e62aa76
Instruction ID: 40a26cfb2b5edc0a9a2dec73702eb2d3ca7d1834c4eeb54678cd4b4dbd2c87c2
Opcode Fuzzy Hash: bbb8ff4d5c3531b8b00622756c31061359b7f49f36ba3359dd9df7116e62aa76
Instruction Fuzzy Hash: 1B31BD73A14B4097D710CF28E58439C73A4F788BA8F248225DB6C87B94DF78D8A4C780

Function 00007FF6B1056258 Relevance: 1.5, APIs: 1, Instructions: 17networkCOMMON

Download Yara Rule

APIs

send.WS2_32 ref: 00007FF6B1056271

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: eb273c8e62681667be047a1082a8753df93594ccfe11bdabdc3f8a7281cb95c8
Instruction ID: 6cef61f1fb1e717e3f6316033c0348654d2d431e0329db5d40ec8d471fa391aa
Opcode Fuzzy Hash: eb273c8e62681667be047a1082a8753df93594ccfe11bdabdc3f8a7281cb95c8
Instruction Fuzzy Hash: F3D05E20E28E0791EFA486B9A8845341298AF5EBFCF142730CB3E9A6D0DF1890D14340

Function 00007FF6B1056064 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

closesocket.WS2_32 ref: 00007FF6B1056071

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: closesocket
String ID:
API String ID: 2781271927-0
Opcode ID: 309f723044aa193f0ad1d720e61fb146d6525e97523c299e6986df46910ed9d9
Instruction ID: 74c4f6fd562388a3b0ffe1ebc0d17c96bedd7a1f469a414300196539d0b21986
Opcode Fuzzy Hash: 309f723044aa193f0ad1d720e61fb146d6525e97523c299e6986df46910ed9d9
Instruction Fuzzy Hash: D1C08C62A20908C3EB544B66A8850242224EB58F34B182320CE798D2E09F14C1E28300

Function 00007FF6B1054D7C Relevance: 1.5, APIs: 1, Instructions: 8fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE ref: 00007FF6B1054D8F

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: d5a4c1bd308a5df499a1d71afb31962f28aa0264ff091325faeae8dc997d8657
Instruction ID: 9e0c2bb484f256694dbbd7808f12de10d9c286fcd91706ffb2626087214cbbf9
Opcode Fuzzy Hash: d5a4c1bd308a5df499a1d71afb31962f28aa0264ff091325faeae8dc997d8657
Instruction Fuzzy Hash: 14C00266A19988D3D710DB18E845759A370F799708FA40111EB8D86725CF3DDE5ACA04

Function 00007FF6B1055DC8 Relevance: 1.4, APIs: 1, Instructions: 101COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6B1055E47

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: f6a1a68b8077f4abf004032f900d586900c70540b1ec09429da611ba7c16311b
Instruction ID: 2a318a0aca1c2689634e4f2004f96f8519ff7c6b218b3caee5a36ab16c55c545
Opcode Fuzzy Hash: f6a1a68b8077f4abf004032f900d586900c70540b1ec09429da611ba7c16311b
Instruction Fuzzy Hash: 4F412472B10B859AE704CF69D840AAC77B1F748BA8F404229DF2C63B88EF74E565C740

Function 00007FF6B105541C Relevance: 1.3, APIs: 1, Instructions: 64COMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,00007FF6B10619C0), ref: 00007FF6B10554CA

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: d612b057b122adfcc8ba2a6b1e5bd610b1b1f778425fb9854dea12b527e7a5c0
Instruction ID: 78b135a904b544e15cdb6e400a5ad52a66d02de79b94b05d3a4ab1b54c265de4
Opcode Fuzzy Hash: d612b057b122adfcc8ba2a6b1e5bd610b1b1f778425fb9854dea12b527e7a5c0
Instruction Fuzzy Hash: 3E217172B1964692EBA08F6DD48067D27A1FB49BEDF248635DF1D87798DE3CD4808700

Function 00007FF6B1051D28 Relevance: 1.3, APIs: 1, Instructions: 41COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6B1051D92

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: a08fded3a889b6abbd7ac3bec9d955f2144fec383ba2b1b8c31bceb57b29b04e
Instruction ID: beb6291ba44dd76a694f353e354a3d77510216c9ae28c7728c2c82e6b6e2165f
Opcode Fuzzy Hash: a08fded3a889b6abbd7ac3bec9d955f2144fec383ba2b1b8c31bceb57b29b04e
Instruction Fuzzy Hash: DD018422718BC595DB10DF1AE5802AAB720EB45BE8F585231EBAD47B99CF7CD081C740

Function 00007FF6B1051FF4 Relevance: 1.3, APIs: 1, Instructions: 37COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6B1052052

Part of subcall function 00007FF6B1052074: malloc.MSVCRT ref: 00007FF6B10520A6
Part of subcall function 00007FF6B1052074: free.MSVCRT ref: 00007FF6B10520C6

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: freemallocmemset
String ID:
API String ID: 3809226132-0
Opcode ID: 37596232427d3c5d00e064ab89cf81e21562fdc567b672547ec40633e165e2df
Instruction ID: eb65ff8ef6dce80baa65487c8eac71e4f9bdfdccb6f39e1c316dcfd463b14e9a
Opcode Fuzzy Hash: 37596232427d3c5d00e064ab89cf81e21562fdc567b672547ec40633e165e2df
Instruction Fuzzy Hash: CD018BA2709AC092DF04DFAAE18407CA722EB48FD87048035EF9C4BB1ECE38C091C380

Function 00007FF6B1054EE8 Relevance: 1.3, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B1054B20: CreateFileA.KERNELBASE ref: 00007FF6B1054C27

CloseHandle.KERNELBASE ref: 00007FF6B1054F49

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CloseCreateFileHandle
String ID:
API String ID: 3498533004-0
Opcode ID: f2e431f6d29d7e5e6171c915017196aaced3f39291d44eb98f6345b893fc8af1
Instruction ID: fd340504e553e43c0fd9372f525333cf57ab5fd4789ec62ed2d25879ec292b19
Opcode Fuzzy Hash: f2e431f6d29d7e5e6171c915017196aaced3f39291d44eb98f6345b893fc8af1
Instruction Fuzzy Hash: 15016972A09F85A1EB00CB68E4443A8A360E786B78F440325D7BD837F5EF68C589C700

Function 00007FF6B1056EB4 Relevance: 1.3, APIs: 1, Instructions: 26COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B105CAD4: free.MSVCRT ref: 00007FF6B105CB21

free.MSVCRT ref: 00007FF6B1056EFA

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 2c25f2ba0310c5bfe4f4cb602394afa2456627ed006bed008d9044ce8ac5c8a9
Instruction ID: d88c9c5aefa8f9cfde7c2f57e57ed28104ba178fa47522d553b25b1017ab98a2
Opcode Fuzzy Hash: 2c25f2ba0310c5bfe4f4cb602394afa2456627ed006bed008d9044ce8ac5c8a9
Instruction Fuzzy Hash: 09F0E925B1168591DB00DB29D48806D6310DBC5F78B344334DB3D433F5DE38D886C700

Function 00007FF6B1051ED0 Relevance: 1.3, APIs: 1, Instructions: 26COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6B1051F12

Part of subcall function 00007FF6B1051BAC: free.MSVCRT ref: 00007FF6B1051BC2

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: ed90f8945e599f778109d760b672ea5591da88bf99befd067e857dd777b61862
Instruction ID: 7bb768898a274655fcc9a1d1d3676100c4e600490ac2a988f2b2753dd07103f6
Opcode Fuzzy Hash: ed90f8945e599f778109d760b672ea5591da88bf99befd067e857dd777b61862
Instruction Fuzzy Hash: D9F0FE25A48A9192EB104B1AF544069A321F78AFB8B2C0631EFA947BD5CF3DD4928704

Function 00007FF6B105CAD4 Relevance: 1.3, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6B105CB21

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 7b3fb30dbd4e7defd84ba5d7f906bd91fe002e481685cff6cd0ba1b436afc6ba
Instruction ID: 36fa5a64d1670075e77b94b0384488a452eaee568410828acdb5283d1006cf88
Opcode Fuzzy Hash: 7b3fb30dbd4e7defd84ba5d7f906bd91fe002e481685cff6cd0ba1b436afc6ba
Instruction Fuzzy Hash: 82F08262524B8682DB209B29E04046A6320FB85FEDF001321EFBD577D9CF2CC154C700

Function 00007FF6B1051CD4 Relevance: 1.3, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6B1051D10

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 04388b7f4e3ff6a0f1b8748100a1a77d70f53149bbd714bf73c04076aa801b05
Instruction ID: 506ec47b9a6b734207f955073242d953dbcd8a1b3a827c4f86a433bf51aea86a
Opcode Fuzzy Hash: 04388b7f4e3ff6a0f1b8748100a1a77d70f53149bbd714bf73c04076aa801b05
Instruction Fuzzy Hash: 08E0A051E086C990EB004A17B580259AA11AB46FF4E08A330EF7D4BBC9CE3CD0928700

Function 00007FF6B10558E4 Relevance: 1.3, APIs: 1, Instructions: 18COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6B105590B

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: da33a95777c1d9f4d56fdbe40be5e4becf52454b4ae06ef51a5a5941dfd3f517
Instruction ID: 06872aaa22a1583a3786bd3ebdca15e42cb091bbe5ead10964d0d5fb2b114ba3
Opcode Fuzzy Hash: da33a95777c1d9f4d56fdbe40be5e4becf52454b4ae06ef51a5a5941dfd3f517
Instruction Fuzzy Hash: B2D0EC21618B8242D7205719B645169A361BB87BB8F680330DBF9477E6CF2DD4918604

Function 00007FF6B1051BAC Relevance: 1.3, APIs: 1, Instructions: 8COMMONLIBRARYCODE

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6B1051BC2

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 94e73ce95805a66b71ef28f659bf7d04456f3945975dd2b7a1630861a4a6831a
Instruction ID: ad33af65d93fd59afe88575520813765c7d5d5926cdf588892bedae6b40c0506
Opcode Fuzzy Hash: 94e73ce95805a66b71ef28f659bf7d04456f3945975dd2b7a1630861a4a6831a
Instruction Fuzzy Hash: 06C00222914AC691C620AB28E8490196720F796779BA08324DABD456F4CF29C55BCB00

Non-executed Functions

Function 00007FF6B105BC30 Relevance: 37.1, APIs: 11, Strings: 10, Instructions: 323encryptionCOMMON

Download Yara Rule

APIs

CryptGenRandom.ADVAPI32 ref: 00007FF6B105BCDF
inet_ntoa.WS2_32 ref: 00007FF6B105BD24

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

Part of subcall function 00007FF6B1051BAC: free.MSVCRT ref: 00007FF6B1051BC2

free.MSVCRT ref: 00007FF6B105BDE1
inet_ntoa.WS2_32 ref: 00007FF6B105BE0D
free.MSVCRT ref: 00007FF6B105BED8
free.MSVCRT ref: 00007FF6B105BFC8
free.MSVCRT ref: 00007FF6B105BFD3
free.MSVCRT ref: 00007FF6B105C06A
free.MSVCRT ref: 00007FF6B105C075
free.MSVCRT ref: 00007FF6B105C0DA
free.MSVCRT ref: 00007FF6B105C0E5

Part of subcall function 00007FF6B1056EB4: free.MSVCRT ref: 00007FF6B1056EFA

Strings

Error while extending the introduce circuit, xrefs: 00007FF6B105BE7D
Creating circuit for hidden service introduce, connecting to '%s' (%s:%u), xrefs: 00007FF6B105BD5D
Extended..., xrefs: 00007FF6B105BEE4
Connected..., xrefs: 00007FF6B105BDED
gfffffff, xrefs: 00007FF6B105BCB3
Extending circuit to introduction point '%s' (%s:%u), xrefs: 00007FF6B105BE43
Sending introduce..., xrefs: 00007FF6B105BEF2
Introduced successfully..., xrefs: 00007FF6B105C080
Introduce failed..., xrefs: 00007FF6B105BF5D
circuit %X is destroyed., xrefs: 00007FF6B105C00D

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$inet_ntoa$CryptCurrentLocalRandomThreadTime_cwprintf_s_l
String ID: Connected...$Creating circuit for hidden service introduce, connecting to '%s' (%s:%u)$Error while extending the introduce circuit$Extended...$Extending circuit to introduction point '%s' (%s:%u)$Introduce failed...$Introduced successfully...$Sending introduce...$circuit %X is destroyed.$gfffffff
API String ID: 167635455-1453383831
Opcode ID: 8e0ca62a437c231e56b12d19c7f691974037359fbad6f25302b44104845d4cc5
Instruction ID: e46c478c03a396767362a2bb86b101bdde165a75885364a7fe77522cba4982d6
Opcode Fuzzy Hash: 8e0ca62a437c231e56b12d19c7f691974037359fbad6f25302b44104845d4cc5
Instruction Fuzzy Hash: C4E17136A08A46A6EB40DF29D4902AD7370FB89B98F445132EB4E97769DF3CE845C740

Function 00007FF6B1057964 Relevance: 19.8, APIs: 4, Strings: 9, Instructions: 333COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

Part of subcall function 00007FF6B1058EF4: CryptHashData.ADVAPI32 ref: 00007FF6B1058F41
Part of subcall function 00007FF6B1058EF4: CryptDestroyHash.ADVAPI32 ref: 00007FF6B1058F66

free.MSVCRT ref: 00007FF6B1057DB2
free.MSVCRT ref: 00007FF6B1057DBD
free.MSVCRT ref: 00007FF6B1057DD4
free.MSVCRT ref: 00007FF6B1057DDF

Strings

circuit::rendezvous_introduce() [or: %s, state: completed], xrefs: 00007FF6B1057E41
circuit::rendezvous_introduce() [or: %s, state: introduced], xrefs: 00007FF6B1057E09
circuit::rendezvous_introduce() [or: %s, state: completing], xrefs: 00007FF6B1057A14
circuit::rendezvous_introduce() [or: %s, is_rendezvous_completed() == false], xrefs: 00007FF6B1057E53
introducee is null [circuit: %X], xrefs: 00007FF6B1057E73
introduction_point is null [circuit: %X], xrefs: 00007FF6B1057E80
circuit::rendezvous_introduce() rendezvous circuit extend node isn't null, xrefs: 00007FF6B1057ABA
circuit::rendezvous_introduce() [or: %s, state: introducing], xrefs: 00007FF6B10579F3
circuit::rendezvous_introduce() [or: %s, is_rendezvous_introduced() == false], xrefs: 00007FF6B1057E66

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$CryptHash$CurrentDataDestroyLocalThreadTime_cwprintf_s_l
String ID: circuit::rendezvous_introduce() [or: %s, is_rendezvous_completed() == false]$circuit::rendezvous_introduce() [or: %s, is_rendezvous_introduced() == false]$circuit::rendezvous_introduce() [or: %s, state: completed]$circuit::rendezvous_introduce() [or: %s, state: completing]$circuit::rendezvous_introduce() [or: %s, state: introduced]$circuit::rendezvous_introduce() [or: %s, state: introducing]$circuit::rendezvous_introduce() rendezvous circuit extend node isn't null$introducee is null [circuit: %X]$introduction_point is null [circuit: %X]
API String ID: 3705592166-1875301337
Opcode ID: 31eff32442b01103d20e1cde5887b84fec044ded49d6882744fd9c23a3c07fd3
Instruction ID: 21a4884bc6fdb3ce6a5134e4708b43da1a60154420279c6cfa0b0c2318784262
Opcode Fuzzy Hash: 31eff32442b01103d20e1cde5887b84fec044ded49d6882744fd9c23a3c07fd3
Instruction Fuzzy Hash: B9F1D462A18B86A6DB00CF69E4801EDB7B0FB85798F504232EB9D93798EF3CD545C740

Function 00007FF6B105EA38 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 143COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6B105EAAF
memmove.MSVCRT ref: 00007FF6B105EB75
memmove.MSVCRT ref: 00007FF6B105EBAD
memmove.MSVCRT ref: 00007FF6B105EBE8
BCryptImportKeyPair.BCRYPT ref: 00007FF6B105EC1C
BCryptExportKey.BCRYPT ref: 00007FF6B105EC4E

Strings

DHPRIVATEBLOB, xrefs: 00007FF6B105EC0C, 00007FF6B105EC42
DHPV, xrefs: 00007FF6B105EA8F

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memmove$Crypt$ExportImportPairmemset
String ID: DHPRIVATEBLOB$DHPV
API String ID: 2581258595-3323250641
Opcode ID: 28d0b0b45e582ffa2b138c9fec63a4ec3d19a56eed5addcaa20d09a3341d85e4
Instruction ID: f1aaef4abcf9334cd2c4fc4cb6a2d59b30df16b617e1e4998b5ba82371da6d87
Opcode Fuzzy Hash: 28d0b0b45e582ffa2b138c9fec63a4ec3d19a56eed5addcaa20d09a3341d85e4
Instruction Fuzzy Hash: 7E519422A24F8896DB11CF28D5043E87760FB99B98F559321DF9C56226EF39E2D5C300

Function 00007FF6B105E824 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 132COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6B105E89D
memmove.MSVCRT ref: 00007FF6B105E95C
memmove.MSVCRT ref: 00007FF6B105E994
memmove.MSVCRT ref: 00007FF6B105E9CF
BCryptImportKeyPair.BCRYPT ref: 00007FF6B105EA03

Strings

DHPUBLICBLOB, xrefs: 00007FF6B105E9F3
DHPB, xrefs: 00007FF6B105E87D

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memmove$CryptImportPairmemset
String ID: DHPB$DHPUBLICBLOB
API String ID: 1384487252-1103359662
Opcode ID: 4acfe324e6df724f1e040e0204e93230e29b86f27483aa88b0128fbe2fc25d14
Instruction ID: 5a569d4b56825b8c017cec8b656a98f436fb4936b66e981a9c54f348e6925617
Opcode Fuzzy Hash: 4acfe324e6df724f1e040e0204e93230e29b86f27483aa88b0128fbe2fc25d14
Instruction Fuzzy Hash: 49516E22A24B8892DB01CF28E5117E87760FB99B98F55D321DF9816216EF39E2D6C340

Function 00007FF6B105DA70 Relevance: 12.2, APIs: 8, Instructions: 174encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,00000000,?,00000001,00007FF6B1062688), ref: 00007FF6B105DB07
CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,00000000,?,00000001,00007FF6B1062688), ref: 00007FF6B105DBDE
CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,00000000,?,00000001,00007FF6B1062688), ref: 00007FF6B105DC54

Part of subcall function 00007FF6B105DE6C: CryptDecodeObject.CRYPT32 ref: 00007FF6B105DEF5
Part of subcall function 00007FF6B105DE6C: CryptImportKey.ADVAPI32 ref: 00007FF6B105DF24

Part of subcall function 00007FF6B105DF40: memmove.MSVCRT ref: 00007FF6B105DF9E
Part of subcall function 00007FF6B105DF40: CryptEncrypt.ADVAPI32 ref: 00007FF6B105DFD5

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: Crypt$Destroy$DecodeEncryptImportObjectmemmove
String ID:
API String ID: 1580205057-0
Opcode ID: c30b0d984695d4eaeac6c9c36ecbd5595295cd30e3513d330de66db6a2297569
Instruction ID: a031a82d83608eee3f9046e79f8792e504d7b225927166edcf7ecee79980b4ec
Opcode Fuzzy Hash: c30b0d984695d4eaeac6c9c36ecbd5595295cd30e3513d330de66db6a2297569
Instruction Fuzzy Hash: 16910D33A29F8596EB408F64E4806ADB370FB99798F105226EF8D53B18EF78D594C740

Function 00007FF6B1059CAC Relevance: 10.7, APIs: 7, Instructions: 178encryptionCOMMON

Download Yara Rule

APIs

CryptHashData.ADVAPI32 ref: 00007FF6B1059E0B
CryptDuplicateHash.ADVAPI32 ref: 00007FF6B1059E26
CryptDestroyHash.ADVAPI32 ref: 00007FF6B1059E4C
free.MSVCRT ref: 00007FF6B1059E67
memmove.MSVCRT ref: 00007FF6B1059EB5
free.MSVCRT ref: 00007FF6B1059F12
free.MSVCRT ref: 00007FF6B1059F1D

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptHashfree$DataDestroyDuplicatememmove
String ID:
API String ID: 2859014979-0
Opcode ID: 8a7bbea6ef78cc92be0436feb0add2f00aeaf753300175a2bd50fefab2f1a97a
Instruction ID: b338674f780556162bd8650b49b913cd49a554086bbc9d00d928933a588a15b9
Opcode Fuzzy Hash: 8a7bbea6ef78cc92be0436feb0add2f00aeaf753300175a2bd50fefab2f1a97a
Instruction Fuzzy Hash: 84813876B04B459AEB00DFA9D4801ED7375FB45B9CB004126DF1DA7B98EE38E54AC380

Function 00007FF6B10659F8 Relevance: 10.5, APIs: 7, Instructions: 47COMMON

Download Yara Rule

APIs

BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6B1065A10
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6B1065A24
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6B1065A38
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6B1065A4C
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6B1065A60
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6B1065A74
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6B1065A90

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: AlgorithmCloseCryptProvider
String ID:
API String ID: 3378198380-0
Opcode ID: acacd586dd903cc131bc294693147f5ada20118ff1c56f894e71a26cd7ab9c6d
Instruction ID: 8ebb70c79bfd7fbd528ca48a3a1deda5ece3c4b0b38803fcf6ef4814124b86bb
Opcode Fuzzy Hash: acacd586dd903cc131bc294693147f5ada20118ff1c56f894e71a26cd7ab9c6d
Instruction Fuzzy Hash: 8011A228F1AA0BA5FF59CF69BC945351351BFC5B8DF088531CA0EC6654CE3CE4855240

Function 00007FF6B105E65C Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 84COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B105E824: memset.MSVCRT ref: 00007FF6B105E89D
Part of subcall function 00007FF6B105E824: memmove.MSVCRT ref: 00007FF6B105E95C
Part of subcall function 00007FF6B105E824: memmove.MSVCRT ref: 00007FF6B105E994

BCryptSecretAgreement.BCRYPT ref: 00007FF6B105E6F7
BCryptDeriveKey.BCRYPT ref: 00007FF6B105E74B
BCryptDestroySecret.BCRYPT ref: 00007FF6B105E758
BCryptDestroyKey.BCRYPT ref: 00007FF6B105E7AC

Strings

TRUNCATE, xrefs: 00007FF6B105E73D

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: Crypt$DestroySecretmemmove$AgreementDerivememset
String ID: TRUNCATE
API String ID: 3314240396-2602342604
Opcode ID: d6c427efbb5417263e7b11c8ec1fe9c8cf8393042251be672aa55d754a412912
Instruction ID: a64234553b80efcf7f80944f8e9f0e0bc39bc201075d94a276832d40d5998f02
Opcode Fuzzy Hash: d6c427efbb5417263e7b11c8ec1fe9c8cf8393042251be672aa55d754a412912
Instruction Fuzzy Hash: 29415C73918BC49AE7108F78E8403AAB760F799768F104325EBAC57B98DF78D148CB40

Function 00007FF6B10596A0 Relevance: 7.6, APIs: 5, Instructions: 53encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyHash.ADVAPI32 ref: 00007FF6B10596D7
CryptDestroyHash.ADVAPI32 ref: 00007FF6B10596F2
CryptDestroyKey.ADVAPI32 ref: 00007FF6B1059722
CryptDestroyKey.ADVAPI32 ref: 00007FF6B1059744
free.MSVCRT ref: 00007FF6B1059753

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroy$Hash$free
String ID:
API String ID: 3361909387-0
Opcode ID: a1fbb5499ca8b7be056e42f54af3c964517e65851418539ff87bbefed6b07906
Instruction ID: 88ecc6c71fb33420c0a7ccb04c8aa4849c92908d2c9522184d1583adc9aff9cd
Opcode Fuzzy Hash: a1fbb5499ca8b7be056e42f54af3c964517e65851418539ff87bbefed6b07906
Instruction Fuzzy Hash: 0821AF33609B8592EB008F55E490329B3B0FF85B79F188235DB5E86A98CF7CD095C310

Function 00007FF6B1051720 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 41threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
_cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

Part of subcall function 00007FF6B1051670: EnterCriticalSection.KERNEL32 ref: 00007FF6B10516A4
Part of subcall function 00007FF6B1051670: GetStdHandle.KERNEL32 ref: 00007FF6B10516B0
Part of subcall function 00007FF6B1051670: GetConsoleScreenBufferInfo.KERNEL32 ref: 00007FF6B10516BE
Part of subcall function 00007FF6B1051670: GetStdHandle.KERNEL32 ref: 00007FF6B10516C9
Part of subcall function 00007FF6B1051670: SetConsoleTextAttribute.KERNEL32 ref: 00007FF6B10516D5
Part of subcall function 00007FF6B1051670: vprintf.MSVCRT ref: 00007FF6B10516E1
Part of subcall function 00007FF6B1051670: GetStdHandle.KERNEL32 ref: 00007FF6B10516EC
Part of subcall function 00007FF6B1051670: SetConsoleTextAttribute.KERNEL32 ref: 00007FF6B10516FA

Strings

[%X]: [%02u:%02u:%02u.%03u] , xrefs: 00007FF6B1051768

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: ConsoleHandle$AttributeText$BufferCriticalCurrentEnterInfoLocalScreenSectionThreadTime_cwprintf_s_lvprintf
String ID: [%X]: [%02u:%02u:%02u.%03u]
API String ID: 819107525-676204660
Opcode ID: 6bb37b10fe762c97f0158456fdc17b584a60dfeebe70f0aab0f80ccda6ad73be
Instruction ID: 8d372a3079f877db55fd241c7108b0a3bbe71a8d7cee69cbcd17723cc39d4e9b
Opcode Fuzzy Hash: 6bb37b10fe762c97f0158456fdc17b584a60dfeebe70f0aab0f80ccda6ad73be
Instruction Fuzzy Hash: 8701A972A08226A6E3105F09A4804BABB71FB8AB9AF140135FF8883644DF3CD196CB10

Function 00007FF6B105A024 Relevance: 4.6, APIs: 3, Instructions: 79encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6B105A098
memmove.MSVCRT ref: 00007FF6B105A0C2
CryptEncrypt.ADVAPI32 ref: 00007FF6B105A0F8

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memmove$CryptEncrypt
String ID:
API String ID: 1967202165-0
Opcode ID: 99964ab7f04a4aece807eaa9b26faa03a356440b740c52e79904aef0ec0f21d6
Instruction ID: 49555b5956e95a44b036ec2e7c50c130b0eb4c38e97065b2c9bbce49008dbfd3
Opcode Fuzzy Hash: 99964ab7f04a4aece807eaa9b26faa03a356440b740c52e79904aef0ec0f21d6
Instruction Fuzzy Hash: DB31B072714B94A6EB148F29D5542A9B760F788BE4F048332DBAD83B85DF7CE196C700

Function 00007FF6B105F6DC Relevance: 4.5, APIs: 3, Instructions: 26encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyHash.ADVAPI32 ref: 00007FF6B105F6FA
CryptDestroyKey.ADVAPI32 ref: 00007FF6B105F70E
CryptDestroyHash.ADVAPI32 ref: 00007FF6B105F722

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroy$Hash
String ID:
API String ID: 101140002-0
Opcode ID: 9ec047c33e819d9b04025df9734792545e43b66864ae2f428afaa7e88abce04e
Instruction ID: c296662f7ddbed0c4a1bafaed70ee8ad41f614c3f3fc30929951d3bdfb3863d0
Opcode Fuzzy Hash: 9ec047c33e819d9b04025df9734792545e43b66864ae2f428afaa7e88abce04e
Instruction Fuzzy Hash: 09F05E2691AA4991FF108F64E45433963A0FF45B7DF188334DB6F891D8CF2C94458740

Function 00007FF6B1052B6C Relevance: 3.9, APIs: 3, Instructions: 108COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6B1052C28
memmove.MSVCRT ref: 00007FF6B1052C5A
memmove.MSVCRT ref: 00007FF6B1052CB7

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 90c11400c37f55b31b77986508d80cd35b6296e806353bf42867f80752df9793
Instruction ID: ab7b633a80be8c56b38c589acfc8a1c04373adb51356e23a3f26e296bcffaa30
Opcode Fuzzy Hash: 90c11400c37f55b31b77986508d80cd35b6296e806353bf42867f80752df9793
Instruction Fuzzy Hash: E9311363B0469997EB10CE69D4443E97B61EB847E8F459232DF4D97B9ACE3CD08AC700

Function 00007FF6B105E144 Relevance: 3.2, APIs: 2, Instructions: 152COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B1052968: BCryptGenRandom.BCRYPT ref: 00007FF6B10529AD

Part of subcall function 00007FF6B105EA38: memset.MSVCRT ref: 00007FF6B105EAAF
Part of subcall function 00007FF6B105EA38: memmove.MSVCRT ref: 00007FF6B105EB75
Part of subcall function 00007FF6B105EA38: memmove.MSVCRT ref: 00007FF6B105EBAD

free.MSVCRT ref: 00007FF6B105E210
BCryptDestroyKey.BCRYPT ref: 00007FF6B105E386

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: Cryptmemmove$DestroyRandomfreememset
String ID:
API String ID: 1712627480-0
Opcode ID: cb7bde7f539ccf291b0dabc359f1628c15cc2de5add17a25372f5c6b13312e9d
Instruction ID: bc834e6f2bd14542b1aad97a1d1fa60b8d7704265079c71683737ffd8361156d
Opcode Fuzzy Hash: cb7bde7f539ccf291b0dabc359f1628c15cc2de5add17a25372f5c6b13312e9d
Instruction Fuzzy Hash: A981F863D18F8482E7118F28D5412A8B764FBA9B88F15A325DFCC53626EF78E2D5C300

Function 00007FF6B105DF40 Relevance: 3.1, APIs: 2, Instructions: 64encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6B105DF9E
CryptEncrypt.ADVAPI32 ref: 00007FF6B105DFD5

Part of subcall function 00007FF6B1052428: memset.MSVCRT ref: 00007FF6B1052486

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptEncryptmemmovememset
String ID:
API String ID: 3182014635-0
Opcode ID: 4f197399e35e4ae3bb9386fbb1f300282d795b25f38f603ca7aa46dd449ca0a1
Instruction ID: 1fb745fafa3089d07ef3244209a33c6b2ab299dadab9b55588e5053db532c2cf
Opcode Fuzzy Hash: 4f197399e35e4ae3bb9386fbb1f300282d795b25f38f603ca7aa46dd449ca0a1
Instruction Fuzzy Hash: 38215C76618BC087E7108F29E04469EBBA0F785B94F148221DBEC47BA9CF3CD545CB40

Function 00007FF6B105DE6C Relevance: 3.0, APIs: 2, Instructions: 49encryptionCOMMON

Download Yara Rule

APIs

CryptDecodeObject.CRYPT32 ref: 00007FF6B105DEF5
CryptImportKey.ADVAPI32 ref: 00007FF6B105DF24

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: Crypt$DecodeImportObject
String ID:
API String ID: 150989800-0
Opcode ID: a6db0cd28a36b82a5764bfa117b478cd55f76bd8fa7272ed60b7a47555988f36
Instruction ID: a5b7981f98ffc345210e8baae3d8d52a03fffc07ac3839bfafaa309d6719e334
Opcode Fuzzy Hash: a6db0cd28a36b82a5764bfa117b478cd55f76bd8fa7272ed60b7a47555988f36
Instruction Fuzzy Hash: 6E218C32A18B4092E7108F28E84895D77A4F758BD8F204335DBAC53BA4DF3AD596C700

Function 00007FF6B10524A8 Relevance: 3.0, APIs: 2, Instructions: 48encryptionCOMMON

Download Yara Rule

APIs

CryptStringToBinaryA.CRYPT32 ref: 00007FF6B1052507

Part of subcall function 00007FF6B1052428: memset.MSVCRT ref: 00007FF6B1052486

CryptStringToBinaryA.CRYPT32 ref: 00007FF6B105255C

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: BinaryCryptString$memset
String ID:
API String ID: 1505698593-0
Opcode ID: 930927c38a347c7a54872c9f0a21b98dcb8ca507b8132dee6682c52f1c8053f2
Instruction ID: ce0501f26d0d53f9595a305f11e8d4e93b1cfbd9bc9b5830c86c1b31430f1ebd
Opcode Fuzzy Hash: 930927c38a347c7a54872c9f0a21b98dcb8ca507b8132dee6682c52f1c8053f2
Instruction Fuzzy Hash: 2D211877624B4486E700CF29E18836D77A4F398BA8F204315DB58477A8CF78D549CB80

Function 00007FF6B105237C Relevance: 3.0, APIs: 2, Instructions: 44encryptionCOMMON

Download Yara Rule

APIs

CryptBinaryToStringA.CRYPT32 ref: 00007FF6B10523D1
CryptBinaryToStringA.CRYPT32 ref: 00007FF6B1052413

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: BinaryCryptString
String ID:
API String ID: 80407269-0
Opcode ID: 1d07f80b9ecbefa7be47259fd9aa380f43fee97850845643df9dbf756d3d2ba1
Instruction ID: b26f3fcae585c0deda0d11024f4834471c98d98b6df07d4c04c044779b542422
Opcode Fuzzy Hash: 1d07f80b9ecbefa7be47259fd9aa380f43fee97850845643df9dbf756d3d2ba1
Instruction Fuzzy Hash: CB113A72314B84C6DB00CF29E484A1DB3A5F388BE8B208235DBAD87758DF79D895C740

Function 00007FF6B1058EF4 Relevance: 3.0, APIs: 2, Instructions: 35encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B10593D8: CryptCreateHash.ADVAPI32 ref: 00007FF6B10593FC

CryptHashData.ADVAPI32 ref: 00007FF6B1058F41

Part of subcall function 00007FF6B1059438: CryptGetHashParam.ADVAPI32 ref: 00007FF6B105948D

CryptDestroyHash.ADVAPI32 ref: 00007FF6B1058F66

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptHash$CreateDataDestroyParam
String ID:
API String ID: 1275266669-0
Opcode ID: fa360d843f1c74f81c8e9685013ab4ed6c618dea2944816cf013783e3cf079b9
Instruction ID: 636b6c8653058b97c285aea0fa141d9452afed699af661d92af586a00693ca5e
Opcode Fuzzy Hash: fa360d843f1c74f81c8e9685013ab4ed6c618dea2944816cf013783e3cf079b9
Instruction Fuzzy Hash: C801D422628A4081EB108B29E5457ADA730EBC1BE8F508331DB69877E5DF7CD0848740

Function 00007FF6B105E430 Relevance: 3.0, APIs: 2, Instructions: 30COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6B105E46C
free.MSVCRT ref: 00007FF6B105E481

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: 47f9418de48106855faaf3f5868e275a2e4526cc28c8ff57d0862da462896ba6
Instruction ID: 9c589266f6cb584e7a6842375a02328b501501ccb9bec41a3f40f1b49eec4a8e
Opcode Fuzzy Hash: 47f9418de48106855faaf3f5868e275a2e4526cc28c8ff57d0862da462896ba6
Instruction Fuzzy Hash: CEF04F32604B4591EB048B09E544368B3A0FB89BA4F588334CBBD477A0DF38E4A6C340

Function 00007FF6B105A3B0 Relevance: 3.0, APIs: 2, Instructions: 25encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6B105A3E0
free.MSVCRT ref: 00007FF6B105A3F5

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: faccd5b6138bc02e140b5324869830716f56d6c199c3274dc33b590c34696df2
Instruction ID: 478538a88428775313712b6eb08c2e57e3325b65218304bfad4878c4ccb6e7cd
Opcode Fuzzy Hash: faccd5b6138bc02e140b5324869830716f56d6c199c3274dc33b590c34696df2
Instruction Fuzzy Hash: 59F05E32604B4695EB108B1DE444329A360EB8ABB8F288330DB6D863F5DF3CD4C58200

Function 00007FF6B105E7C8 Relevance: 3.0, APIs: 2, Instructions: 25COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6B105E7F8
free.MSVCRT ref: 00007FF6B105E80D

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: d9a6dc4703cefce0945b1ac41ee772dc531f8293cc4494024d7b1c481330ff51
Instruction ID: 894eac6555fd17a6513cc0ce8507b8608ebd290f5d2fde56d88980bda2035b57
Opcode Fuzzy Hash: d9a6dc4703cefce0945b1ac41ee772dc531f8293cc4494024d7b1c481330ff51
Instruction Fuzzy Hash: 36F05E32604B4695EB108B18E444325A360FB8AB78F288330CBAD463E4DF3CD085C200

Function 00007FF6B105265C Relevance: 3.0, APIs: 2, Instructions: 24COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6B1052688
free.MSVCRT ref: 00007FF6B105269D

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: 089fdbaed0c4cde502a55d9f1622715043e3a179d3634e617963da521d597055
Instruction ID: 4859e2da9a8a0a8fcfd379737927f8e915f79f4c31d6f632170c510ede422aba
Opcode Fuzzy Hash: 089fdbaed0c4cde502a55d9f1622715043e3a179d3634e617963da521d597055
Instruction Fuzzy Hash: 10F01C32605B8696EB258B19E844369A360FF8AB78F684330CB7D863E5DF3DD485C600

Function 00007FF6B1056868 Relevance: 3.0, APIs: 2, Instructions: 24encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6B1056894
free.MSVCRT ref: 00007FF6B10568A9

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: 2843925ed57b20ab13a794e11ab8f8a46f9e44d14407158338b018dab6725bc0
Instruction ID: be0b1dfb11b039795d19bfc3d12416a197c6f6d2374de3ce41c496bde1806704
Opcode Fuzzy Hash: 2843925ed57b20ab13a794e11ab8f8a46f9e44d14407158338b018dab6725bc0
Instruction Fuzzy Hash: A7F01C32A15B4692EB118B19E844365A360FF8AB78F684330CB7D863E5DF3DD4858200

Function 00007FF6B10659B4 Relevance: 3.0, APIs: 2, Instructions: 15encryptionCOMMON

Download Yara Rule

APIs

CryptReleaseContext.ADVAPI32 ref: 00007FF6B10659C6
CryptReleaseContext.ADVAPI32 ref: 00007FF6B10659E2

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: ContextCryptRelease
String ID:
API String ID: 829835001-0
Opcode ID: 0933072446bb746b14eb2922227f86c8964953e949b1d33008527ce0b53f99d4
Instruction ID: 9fbf48e5b3d5f6496f532ff6d32f4e8fd551d54e5bbc88f20b320c45ec9a21b2
Opcode Fuzzy Hash: 0933072446bb746b14eb2922227f86c8964953e949b1d33008527ce0b53f99d4
Instruction Fuzzy Hash: 9EE08619F0AA46E1FB4A8F19EC9133112A07F8274DF444732D20DC6094CF7C6098C7A0

Function 00007FF6B105DD64 Relevance: 1.6, APIs: 1, Instructions: 65encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B1059F88: memset.MSVCRT ref: 00007FF6B1059FA2

Part of subcall function 00007FF6B105A024: memmove.MSVCRT ref: 00007FF6B105A098
Part of subcall function 00007FF6B105A024: memmove.MSVCRT ref: 00007FF6B105A0C2
Part of subcall function 00007FF6B105A024: CryptEncrypt.ADVAPI32 ref: 00007FF6B105A0F8

CryptDestroyKey.ADVAPI32 ref: 00007FF6B105DE43

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: Cryptmemmove$DestroyEncryptmemset
String ID:
API String ID: 3702594739-0
Opcode ID: 987bbb5fccacf110f3d215f9ea75552774e37f66de29ff99ab8ab74858613628
Instruction ID: 642303df4888d54d08f04bb1879cc94ffec2ebaad7b6b05949f1b4c0532056e8
Opcode Fuzzy Hash: 987bbb5fccacf110f3d215f9ea75552774e37f66de29ff99ab8ab74858613628
Instruction Fuzzy Hash: 7F31B236B15B449EF750CFA4E4442DD33B6E748758B004229DF5DA3B98EE38956AC344

Function 00007FF6B1053E20 Relevance: 1.6, APIs: 1, Instructions: 312COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6B1054292

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 1592877d93837fd605770cd881776ec763c5fa6a977be281f3abedda31fc8d3c
Instruction ID: 7c53a4899fd70690a6bddaf094b90a2ff6204d817a073c7d3eb5886eafac874a
Opcode Fuzzy Hash: 1592877d93837fd605770cd881776ec763c5fa6a977be281f3abedda31fc8d3c
Instruction Fuzzy Hash: 96F14F63A14F99C6D764CF3CD4861DDA378F7A8788F54A216DB8D52A6AEF34D290C300

Function 00007FF6B1059438 Relevance: 1.5, APIs: 1, Instructions: 25encryptionCOMMON

Download Yara Rule

APIs

CryptGetHashParam.ADVAPI32 ref: 00007FF6B105948D

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptHashParam
String ID:
API String ID: 1839025277-0
Opcode ID: efc676361976cc016be048d7a591b5e47f15783f3430438d3d90edcaca09b70b
Instruction ID: f9399ee327ffc86a37275cfd1250e0c83894a997c7090cb0b4a8fc9d1ba63af2
Opcode Fuzzy Hash: efc676361976cc016be048d7a591b5e47f15783f3430438d3d90edcaca09b70b
Instruction Fuzzy Hash: 57F0177261478483E704CB16E5493A9B360F784BB8F104325EBA947BD9CFBCD5558B40

Function 00007FF6B1052968 Relevance: 1.5, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

BCryptGenRandom.BCRYPT ref: 00007FF6B10529AD

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptRandom
String ID:
API String ID: 2662593985-0
Opcode ID: 85098f2f455a1ad74efeb1fb5c359c4b9ef5c281bdb4f559abec954d7f6c00b0
Instruction ID: c4acf835f8d5ec8e931ad03582cbbe89a35f334e6881407c4ca4132fba0e8046
Opcode Fuzzy Hash: 85098f2f455a1ad74efeb1fb5c359c4b9ef5c281bdb4f559abec954d7f6c00b0
Instruction Fuzzy Hash: C3E0396261478582E7248F29E41566AA360F785BB8F048735DEB90AAD8CF3CD0858B80

Function 00007FF6B1052574 Relevance: 1.5, APIs: 1, Instructions: 19encryptionCOMMON

Download Yara Rule

APIs

CryptGenRandom.ADVAPI32 ref: 00007FF6B10525B4

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptRandom
String ID:
API String ID: 2662593985-0
Opcode ID: 3f149b66201509bc817e725a0f7ec8cecd2c81adcb0e292f965ea22d79170c87
Instruction ID: 90a5b9bcf1adb0fad7d7c61cc80f95ae0b1859a7c3096b59ddb1a62fa6d09260
Opcode Fuzzy Hash: 3f149b66201509bc817e725a0f7ec8cecd2c81adcb0e292f965ea22d79170c87
Instruction Fuzzy Hash: EFE06D6261478082DB208F29E80426AA320F785BF8F044734EEB90B3D8CF3CD0448B50

Function 00007FF6B1059F44 Relevance: 1.5, APIs: 1, Instructions: 18encryptionCOMMON

Download Yara Rule

APIs

CryptDuplicateHash.ADVAPI32 ref: 00007FF6B1059F6E

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDuplicateHash
String ID:
API String ID: 2532617884-0
Opcode ID: 7908c2d88e00ac11f48da2c56d874cb30d669a525e1c9b334784097eea00fc61
Instruction ID: 5fc08713cc7fc1f0c1ef419153822c83dd94ad910b9339e81af50f7a37026781
Opcode Fuzzy Hash: 7908c2d88e00ac11f48da2c56d874cb30d669a525e1c9b334784097eea00fc61
Instruction Fuzzy Hash: C7E0487251464483E7208F15D41471AB261F385779F144720EEB8066D4CB7DC1554A04

Function 00007FF6B105E3EC Relevance: 1.5, APIs: 1, Instructions: 17COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6B105E41B

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 43fbf3bb42c67933434ac18abc5d00269f02bc4f57afb1bb7b9f54390021a9c5
Instruction ID: 373828a3349f0e75f811748a631b4e28f6e5622499750b13e138a759608cb2da
Opcode Fuzzy Hash: 43fbf3bb42c67933434ac18abc5d00269f02bc4f57afb1bb7b9f54390021a9c5
Instruction Fuzzy Hash: A9E06526904B45A2DB008F14E444328B360FB95738F284324CBB8062E4EF3CC096C710

Function 00007FF6B105979C Relevance: 1.5, APIs: 1, Instructions: 17encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6B10597CA

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: d79bc7ca58d7d20b20c22d851522b8fc49d9dfc1cfd95cbefd9a3066b3c509bf
Instruction ID: fdddbe105518dc884209642eeee4cdf6db0bd148ebe87c5e415bd873d341bea3
Opcode Fuzzy Hash: d79bc7ca58d7d20b20c22d851522b8fc49d9dfc1cfd95cbefd9a3066b3c509bf
Instruction Fuzzy Hash: CCE01A36915B45A1EB108B54E444325B364FB99739F244334DBBD466E4DF3CC496C700

Function 00007FF6B10597DC Relevance: 1.5, APIs: 1, Instructions: 17encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6B105980A

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 8480c7b872c6153f762a1c35a41caac65edad2bd379c37788eeae1eb254d20d6
Instruction ID: a4f9c1741a5e0d10040122ad9a74127c601d9484e57d333d25936810f8467439
Opcode Fuzzy Hash: 8480c7b872c6153f762a1c35a41caac65edad2bd379c37788eeae1eb254d20d6
Instruction Fuzzy Hash: 00E01A36915B45A1EB108B54E444335B364EB99739F248334DBBD466E4DF3CC496C700

Function 00007FF6B105E3B0 Relevance: 1.5, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6B105E3D9

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 001641c298eed489aa3e8f3bdb394a61a70d10eab085832186da0eaf72c04da5
Instruction ID: 320141d3b96af7f78c314bf26e7836eb2b07afb0fa406d8b80ca67f740005aef
Opcode Fuzzy Hash: 001641c298eed489aa3e8f3bdb394a61a70d10eab085832186da0eaf72c04da5
Instruction Fuzzy Hash: 45E08636515F45A1DB104B14E444324B364FB55738F148334DBBD452E0DF3CC096C300

Function 00007FF6B105981C Relevance: 1.5, APIs: 1, Instructions: 16encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6B1059845

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 15f57af45a4fe53b928ed7f5d1cb814d61999b227e13284e715b510e593bfea7
Instruction ID: 7008765d1e4f9373f42683b3c6563dd828db44fa1af1224766d072b524d64cf5
Opcode Fuzzy Hash: 15f57af45a4fe53b928ed7f5d1cb814d61999b227e13284e715b510e593bfea7
Instruction Fuzzy Hash: 57E08C36A16B45A1EB109B18E444334B320EB99B39F288334DBBD462E4EF3CD4DAC300

Function 00007FF6B1052600 Relevance: 1.5, APIs: 1, Instructions: 15COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6B1052625

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 6d38ba3e7e9cdb38ad0192845ee3499e73be5f42258c5a8745c7a72746f69d8d
Instruction ID: a86f9b80ee7750c6faade926d964b174e6322c470f731a0a16c24a44504b76a4
Opcode Fuzzy Hash: 6d38ba3e7e9cdb38ad0192845ee3499e73be5f42258c5a8745c7a72746f69d8d
Instruction Fuzzy Hash: BEE01266A16F4591EB118B18E4443246360FF59B39F184734CBBD462E1DF2CC096C750

Function 00007FF6B105680C Relevance: 1.5, APIs: 1, Instructions: 15encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6B1056831

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 5fd55c9b7b233f6b0b12e12d2570dd48a0f4c6ff265f9825d5f45cf3e838cca7
Instruction ID: 9f97eecdbeede4902dfa1211c0c28e1061611aa4904d9d4120f574fcbcb90b44
Opcode Fuzzy Hash: 5fd55c9b7b233f6b0b12e12d2570dd48a0f4c6ff265f9825d5f45cf3e838cca7
Instruction Fuzzy Hash: ABE01266A16B4591EB114F18E8443346320EF59B39F184734CBBD463E0DF2CC4D6C300

Function 00007FF6B10593D8 Relevance: 1.5, APIs: 1, Instructions: 14encryptionCOMMON

Download Yara Rule

APIs

CryptCreateHash.ADVAPI32 ref: 00007FF6B10593FC

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CreateCryptHash
String ID:
API String ID: 4184778727-0
Opcode ID: 121985282fabb5adbc11c17baa7c0eb8cc516e6661f2a8188b42595464713377
Instruction ID: fa074cdf7da65d41fe88801b1bc11f488b0e422f35f0df119a648ae499a9ec33
Opcode Fuzzy Hash: 121985282fabb5adbc11c17baa7c0eb8cc516e6661f2a8188b42595464713377
Instruction Fuzzy Hash: 69D05E26B2854583F7500B64A811B265260B798788F044130DF4C46B50CE3C90518A54

Function 00007FF6B105940C Relevance: 1.5, APIs: 1, Instructions: 13encryptionCOMMONLIBRARYCODE

Download Yara Rule

APIs

CryptDestroyHash.ADVAPI32 ref: 00007FF6B1059426

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroyHash
String ID:
API String ID: 174375392-0
Opcode ID: bf2e51b3bf74bb31f5afdb65abfae39d0267f6ab76d92b9377712b0bc40bf592
Instruction ID: 1635f93488714dd60da0ac49bd811e35b427e27d6f4be539f3ce72a7bf8a2907
Opcode Fuzzy Hash: bf2e51b3bf74bb31f5afdb65abfae39d0267f6ab76d92b9377712b0bc40bf592
Instruction Fuzzy Hash: A9D0C756915A4581FF214B64E4143396360AB59B39F544720DBBE451D5CF2C40554640

Function 00007FF6B1052638 Relevance: 1.5, APIs: 1, Instructions: 11COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6B105264A

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 80538321c000e645ece4a1aef763e3b14a5d6f098b9dd098b656d6fd2bd4e3eb
Instruction ID: c88f9f547f9fcbe637d15bd73d2e830fe9c7901092c3bd0ebf2deb1bae0328c6
Opcode Fuzzy Hash: 80538321c000e645ece4a1aef763e3b14a5d6f098b9dd098b656d6fd2bd4e3eb
Instruction Fuzzy Hash: DFC01252B1694991EF154B95E48533452109F5CB0DF1C4124CB1D49150CE1C84D68610

Function 00007FF6B1056844 Relevance: 1.5, APIs: 1, Instructions: 11encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6B1056856

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 237440da11a4490b7cb7b9e96e883b009bc20c2bdb42f6fdbf28bdce3af74890
Instruction ID: ad2231a716f61ffd754bd2ca49a15e396d19cc645ef5d64713efef529967ea2e
Opcode Fuzzy Hash: 237440da11a4490b7cb7b9e96e883b009bc20c2bdb42f6fdbf28bdce3af74890
Instruction Fuzzy Hash: 91C01292E2694992FF198BAAE4853345220AF68B4AF1C4130CB0D89242CE2898EA8250

Function 00007FF6B1059F88 Relevance: 1.3, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6B1059FA2

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: fd04d8a1611545bcdfb01e14a56ce3b23e9abc9fd5910df88a4cafdb0b6e17c7
Instruction ID: 3f2f55ca7810240d08063e87fc70b5288c59bd5c8a7b50099bcf02f5e44766f1
Opcode Fuzzy Hash: fd04d8a1611545bcdfb01e14a56ce3b23e9abc9fd5910df88a4cafdb0b6e17c7
Instruction Fuzzy Hash: 891100B3A14B89A7E315CF2AD6405A87370FB9DB98B149325DF9803A06DF34E5E4CB40

Function 00007FF6B1062198 Relevance: 23.0, APIs: 7, Strings: 6, Instructions: 276synchronizationthreadCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B1051720: GetCurrentThreadId.KERNEL32 ref: 00007FF6B1051743
Part of subcall function 00007FF6B1051720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6B105AB9E), ref: 00007FF6B1051750
Part of subcall function 00007FF6B1051720: _cwprintf_s_l.LIBCMT ref: 00007FF6B1051791

malloc.MSVCRT ref: 00007FF6B1062241
malloc.MSVCRT ref: 00007FF6B106240C
memmove.MSVCRT ref: 00007FF6B1062425
free.MSVCRT ref: 00007FF6B106242D

Part of subcall function 00007FF6B1062A1C: malloc.MSVCRT ref: 00007FF6B1062A3F

Part of subcall function 00007FF6B1051BAC: free.MSVCRT ref: 00007FF6B1051BC2

CreateThread.KERNEL32 ref: 00007FF6B10624ED
WaitForSingleObject.KERNEL32 ref: 00007FF6B106254C
free.MSVCRT ref: 00007FF6B10625A3

Strings

Start ping threads..., xrefs: 00007FF6B1062484
Wait for pings to complete..., xrefs: 00007FF6B1062507
All pings completed, xrefs: 00007FF6B1062587
Ping url %s for %d times, xrefs: 00007FF6B10621D4
Ping URL %s, xrefs: 00007FF6B1062217
cached-consensus, xrefs: 00007FF6B10621A5

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: freemalloc$Thread$CreateCurrentLocalObjectSingleTimeWait_cwprintf_s_lmemmove
String ID: All pings completed$Ping URL %s$Ping url %s for %d times$Start ping threads...$Wait for pings to complete...$cached-consensus
API String ID: 1567787208-2628093854
Opcode ID: ffe1cca51197000a8f42de9dea2898ea7e9a7de8dc6392904ae42251066b5d1d
Instruction ID: 1a25e66887900da9f1c04e61114b3795e20dd068d363a8e87abb9aa6ae681b92
Opcode Fuzzy Hash: ffe1cca51197000a8f42de9dea2898ea7e9a7de8dc6392904ae42251066b5d1d
Instruction Fuzzy Hash: F6C17F32A19B9AA6EB10CF29E8401AD77B4FB88788F544132DF4D93B68DF38D595C340

Function 00007FF6B1051670 Relevance: 12.0, APIs: 8, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF6B10516A4
GetStdHandle.KERNEL32 ref: 00007FF6B10516B0
GetConsoleScreenBufferInfo.KERNEL32 ref: 00007FF6B10516BE
GetStdHandle.KERNEL32 ref: 00007FF6B10516C9
SetConsoleTextAttribute.KERNEL32 ref: 00007FF6B10516D5
vprintf.MSVCRT ref: 00007FF6B10516E1
GetStdHandle.KERNEL32 ref: 00007FF6B10516EC
SetConsoleTextAttribute.KERNEL32 ref: 00007FF6B10516FA

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: ConsoleHandle$AttributeText$BufferCriticalEnterInfoScreenSectionvprintf
String ID:
API String ID: 2254156624-0
Opcode ID: 277ca703be82f7eca63050ecd9ef302465b1a89250643f35432e010036c13fc1
Instruction ID: 5cfc1bc0c7ef5d4958113ab15d2d60a2444fe0feffcba75350c4a23d03e1d707
Opcode Fuzzy Hash: 277ca703be82f7eca63050ecd9ef302465b1a89250643f35432e010036c13fc1
Instruction Fuzzy Hash: 6D110C25608B56A2E7148B2AA8140297775FF8AFB5B044336EF6E53BE4CF3CD4858340

Function 00007FF6B10543B8 Relevance: 10.2, APIs: 8, Instructions: 172COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6B10543F7
memset.MSVCRT ref: 00007FF6B1054413
memset.MSVCRT ref: 00007FF6B105442B
memset.MSVCRT ref: 00007FF6B105443C
memset.MSVCRT ref: 00007FF6B105446C
memset.MSVCRT ref: 00007FF6B1054484
memset.MSVCRT ref: 00007FF6B1054495
memset.MSVCRT ref: 00007FF6B10544AD

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 14813179bd20c38003406cc7ed29ee73924055d5f3241d059106a884a8e490ec
Instruction ID: c6c0dd044d9d6c33d6a8c1a546ed79a24d3bb5916efdfb6c9f8ea569910e0881
Opcode Fuzzy Hash: 14813179bd20c38003406cc7ed29ee73924055d5f3241d059106a884a8e490ec
Instruction Fuzzy Hash: C6818132608BC495E7229F29E8416E9B7B0FF99798F445121EF8857B29EF38D295C700

Function 00007FF6B1065AD0 Relevance: 9.0, APIs: 6, Instructions: 44COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6B1065B0E
free.MSVCRT ref: 00007FF6B1065B1C
free.MSVCRT ref: 00007FF6B1065B2A
free.MSVCRT ref: 00007FF6B1065B35
DeleteCriticalSection.KERNEL32 ref: 00007FF6B1065B49
free.MSVCRT ref: 00007FF6B1065B52

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: free$CriticalDeleteSection
String ID:
API String ID: 682657753-0
Opcode ID: 864e211fde3c5676027d49671441ab8089f0e66f8c30b5626bd240cd5fdeda98
Instruction ID: d58373fb4fe5706686242903774d2f05270af6fd76ca6e2ed29a32665238f305
Opcode Fuzzy Hash: 864e211fde3c5676027d49671441ab8089f0e66f8c30b5626bd240cd5fdeda98
Instruction Fuzzy Hash: 1D114F31A08E86E2E7158F29EA501397330FF86BD8F140232DB6D936A5CF3CE4A58740

Function 00007FF6B1060AE4 Relevance: 8.0, APIs: 1, Strings: 4, Instructions: 484COMMON

Download Yara Rule

APIs

sscanf.MSVCRT ref: 00007FF6B1060F72

Strings

443, xrefs: 00007FF6B1060EFB
://, xrefs: 00007FF6B1060B77
https://, xrefs: 00007FF6B1060EAC
http://, xrefs: 00007FF6B1060C08, 00007FF6B1060E4A

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: sscanf
String ID: 443$://$http://$https://
API String ID: 3173990253-1974554892
Opcode ID: 6c3de7185f60b683d714f23e478a0f15108d321673e3de7addf1343788c77b04
Instruction ID: 24407b12fca30b07388103b058347fecbe1fb09cc4993fb22e41fea39a62d9c4
Opcode Fuzzy Hash: 6c3de7185f60b683d714f23e478a0f15108d321673e3de7addf1343788c77b04
Instruction Fuzzy Hash: 54222872B14B849AEB00CFA8E4841EC73BAFB49B987518526DF5D97B58EF38D154C380

Function 00007FF6B1060104 Relevance: 7.7, APIs: 4, Strings: 1, Instructions: 223COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B1051BAC: free.MSVCRT ref: 00007FF6B1051BC2

Part of subcall function 00007FF6B1052B6C: memmove.MSVCRT ref: 00007FF6B1052C28
Part of subcall function 00007FF6B1052B6C: memmove.MSVCRT ref: 00007FF6B1052C5A
Part of subcall function 00007FF6B1052B6C: memmove.MSVCRT ref: 00007FF6B1052CB7

memcmp.MSVCRT ref: 00007FF6B10602C0
free.MSVCRT ref: 00007FF6B10602DD
free.MSVCRT ref: 00007FF6B10602FD
free.MSVCRT ref: 00007FF6B10603E9

Part of subcall function 00007FF6B1051D28: memmove.MSVCRT ref: 00007FF6B1051D92

Strings

gfffffff, xrefs: 00007FF6B10603BD

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: freememmove$memcmp
String ID: gfffffff
API String ID: 4015841801-1523873471
Opcode ID: eeb92bd17c587c5cf19ee2c0362f0b5e417602a8a58753a8bc159406b2a9ce08
Instruction ID: 85a5367deb5427db45e2919fef5d40db119dc81279057f685aa8649d02d6c439
Opcode Fuzzy Hash: eeb92bd17c587c5cf19ee2c0362f0b5e417602a8a58753a8bc159406b2a9ce08
Instruction Fuzzy Hash: E3A19F72A18B89E6EB50CF69E4800EDB365FB84798F105136EF8DA3A58DF78D581C340

Function 00007FF6B10568C0 Relevance: 7.7, APIs: 1, Strings: 4, Instructions: 161COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6B1051DBC: _vscprintf.MSVCRT(00007FF6B1055735), ref: 00007FF6B1051DF1
Part of subcall function 00007FF6B1051DBC: vsprintf_s.MSVCRT ref: 00007FF6B1051E2F

free.MSVCRT ref: 00007FF6B1056AFF

Strings

circuit::create_stream() [url: %s, stream: %u, status: creating], xrefs: 00007FF6B10569F3
%s:%hi, xrefs: 00007FF6B10568F5
circuit::create_stream() [is_ready() == false], xrefs: 00007FF6B1056A95
circuit::create_stream() [url: %s, stream: %u, status: created], xrefs: 00007FF6B1056A67

Memory Dump Source

Source File: 00000000.00000002.3878570898.00007FF6B1051000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6B1050000, based on PE: true

Associated: 00000000.00000002.3878556602.00007FF6B1050000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878630834.00007FF6B1066000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878647365.00007FF6B1071000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3878705049.00007FF6B1072000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6b1050000_Payload 94.jbxd

Similarity

API ID: _vscprintffreevsprintf_s
String ID: %s:%hi$circuit::create_stream() [is_ready() == false]$circuit::create_stream() [url: %s, stream: %u, status: created]$circuit::create_stream() [url: %s, stream: %u, status: creating]
API String ID: 846591216-3309545152
Opcode ID: 3f0860a1cb914a7427bf635494ffe94928eb6bde455e0f7bad893d425fa25ae0
Instruction ID: fdedaff5c3e1129847dfe48cd5dd23b89ceb7b6dcde8105e18fd4b20a02e96ca
Opcode Fuzzy Hash: 3f0860a1cb914a7427bf635494ffe94928eb6bde455e0f7bad893d425fa25ae0
Instruction Fuzzy Hash: AF713B26B14B85AAE7009F69D4802EC73B1FB48B98B004236EF5D97BA8DF38D555C380

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources. They can attempt to render stored data inaccessible by encrypting files or data on local and remote drives and withholding access to a decryption key. This may be done in order to extract monetary compensation from a victim in exchange for decryption or a decryption key (ransomware) or to render data permanently inaccessible in cases where the key is not saved or transmitted.
Tactics:	Impact
Data Sources:	Cloud Storage: Cloud Storage Modification, Command: Command Execution, File: File Creation, File: File Modification, Network Share: Network Share Access, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Payload 94.75 (3).225.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Boot Survival

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\Desktop\cached-consensus

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Imports

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

HTTP Request Dependency Graph

HTTP Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: Payload 94.75 (3).225.exePID: 6508, Parent PID: 1028

Windows Analysis Report
Payload 94.75 (3).225.exe

Function 00007FF6B10527B0 Relevance: 45.6, APIs: 13, Strings: 13, Instructions: 80
libraryCOMMON

Function 00007FF6B1058770 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 133
encryptionCOMMON

Function 00007FF6B105F50C Relevance: 18.1, APIs: 12, Instructions: 121
encryptionCOMMON

Function 00007FF6B105B1A4 Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 170
encryptionCOMMON

Function 00007FF6B105A9E8 Relevance: 17.7, APIs: 8, Strings: 2, Instructions: 157
encryptionCOMMON

Function 00007FF6B105B618 Relevance: 33.6, APIs: 4, Strings: 15, Instructions: 385
COMMON

Function 00007FF6B1051160 Relevance: 26.4, APIs: 10, Strings: 5, Instructions: 154
COMMON

Function 00007FF6B105F734 Relevance: 23.1, APIs: 11, Strings: 2, Instructions: 346
COMMON

Function 00007FF6B1061670 Relevance: 19.8, APIs: 2, Strings: 11, Instructions: 309
COMMON

Function 00007FF6B1056084 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 86
networkCOMMON

Function 00007FF6B105EEC0 Relevance: 18.2, APIs: 7, Strings: 5, Instructions: 232
COMMON

Function 00007FF6B1058974 Relevance: 16.7, APIs: 2, Strings: 9, Instructions: 245
COMMON

Function 00007FF6B1061374 Relevance: 16.0, APIs: 2, Strings: 7, Instructions: 201
COMMON

Function 00007FF6B10513B4 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 164
registryCOMMON

Function 00007FF6B1062600 Relevance: 15.2, APIs: 3, Strings: 7, Instructions: 201
COMMON