Edit tour

Windows Analysis Report
Payload 94.75 (2).225.exe

Overview

General Information

Sample name:	Payload 94.75 (2).225.exe
Analysis ID:	1547866
MD5:	9c972cb270fb33444a0f8d12d6176c7d
SHA1:	5a2839d6c6a6327342d51db71b4988aaf053b06f
SHA256:	4b385e050d5a880bee7bfd582d8bf75ff18d0c115c6b30f7d3e86742f7c5dfc1
Tags:	94-75-225-81exeuser-JAMESWT_MHT
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Connects to many ports of the same IP (likely port scanning)

Found Tor onion address

Machine Learning detection for sample

Connects to several IPs in different countries

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Found potential string decryption / allocating functions

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Classification

Process Tree

System is w10x64

Payload 94.75 (2).225.exe (PID: 1488 cmdline: "C:\Users\user\Desktop\Payload 94.75 (2).225.exe" MD5: 9C972CB270FB33444A0F8D12D6176C7D)

conhost.exe (PID: 5968 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Payload 94.75 (2).225.exe (PID: 6220 cmdline: "C:\Users\user\Desktop\Payload 94.75 (2).225.exe" MD5: 9C972CB270FB33444A0F8D12D6176C7D)

conhost.exe (PID: 4296 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Payload 94.75 (2).225.exe (PID: 1252 cmdline: "C:\Users\user\Desktop\Payload 94.75 (2).225.exe" MD5: 9C972CB270FB33444A0F8D12D6176C7D)

conhost.exe (PID: 5492 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Sigma Signatures

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\Desktop\Payload 94.75 (2).225.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\Payload 94.75 (2).225.exe, ProcessId: 1488, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ft2mzkczyu

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-03T09:35:18.343489+0100	2022930	1	A Network Trojan was detected	52.149.20.212	443	192.168.2.5	49718	TCP
2024-11-03T09:35:47.305346+0100	2022930	1	A Network Trojan was detected	52.149.20.212	443	192.168.2.5	58368	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Payload 94.75 (2).225.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: Payload 94.75 (2).225.exe

ReversingLabs: Detection: 76%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 98.8% probability

Machine Learning detection for sample

Source: Payload 94.75 (2).225.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7A9C0 CryptGenRandom,free,free,free,free,CryptGenRandom,inet_ntoa,inet_ntoa,	0_2_00007FF639B7A9C0
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B799F4 CryptHashData,CryptHashData,CryptDestroyKey,CryptDestroyKey,	0_2_00007FF639B799F4
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7B17C free,free,free,memcmp,free,free,CryptGenRandom,	0_2_00007FF639B7B17C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7A16C memmove,CryptImportKey,	0_2_00007FF639B7A16C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7F42C malloc,memmove,CryptImportKey,free,CryptCreateHash,memset,CryptSetHashParam,CryptHashData,CryptGetHashParam,CryptDestroyHash,CryptDestroyKey,CryptDestroyHash,	0_2_00007FF639B7F42C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B8111C free,free,free,CryptGenRandom,free,free,	0_2_00007FF639B8111C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B71024 GetEnvironmentVariableA,LoadLibraryA,CryptAcquireContextA,CryptAcquireContextA,atexit,	0_2_00007FF639B71024
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B727B0 GetEnvironmentVariableA,LoadLibraryA,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,	0_2_00007FF639B727B0
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B78748 CryptHashData,free,CryptDestroyHash,free,free,CryptHashData,free,CryptDestroyHash,free,free,	0_2_00007FF639B78748
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7E30C BCryptDestroyKey,	0_2_00007FF639B7E30C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7E2D0 BCryptDestroyKey,	0_2_00007FF639B7E2D0
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7D990 CryptDestroyKey,CryptDestroyKey,CryptDestroyKey,free,free,free,free,free,	0_2_00007FF639B7D990
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7E958 memset,memmove,memmove,memmove,BCryptImportKeyPair,BCryptExportKey,	0_2_00007FF639B7E958
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B72968 BCryptGenRandom,	0_2_00007FF639B72968
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B79C84 CryptHashData,CryptDuplicateHash,CryptDestroyHash,free,memmove,free,free,	0_2_00007FF639B79C84
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7DC84 CryptDestroyKey,	0_2_00007FF639B7DC84
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B724A8 CryptStringToBinaryA,CryptStringToBinaryA,	0_2_00007FF639B724A8
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B79410 CryptGetHashParam,	0_2_00007FF639B79410
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B793E4 CryptDestroyHash,	0_2_00007FF639B793E4
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7237C CryptBinaryToStringA,CryptBinaryToStringA,	0_2_00007FF639B7237C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7A388 CryptDestroyKey,free,	0_2_00007FF639B7A388
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B793B0 CryptCreateHash,	0_2_00007FF639B793B0
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7E350 BCryptDestroyKey,free,	0_2_00007FF639B7E350
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B79F1C CryptDuplicateHash,	0_2_00007FF639B79F1C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B78ECC CryptHashData,CryptDestroyHash,	0_2_00007FF639B78ECC
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7E6E8 BCryptDestroyKey,free,	0_2_00007FF639B7E6E8
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B79678 CryptDestroyHash,CryptDestroyHash,CryptDestroyKey,CryptDestroyKey,free,	0_2_00007FF639B79678
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B72638 BCryptDestroyKey,	0_2_00007FF639B72638
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7265C BCryptDestroyKey,free,	0_2_00007FF639B7265C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7DE60 memmove,CryptEncrypt,	0_2_00007FF639B7DE60
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7F5FC CryptDestroyHash,CryptDestroyKey,CryptDestroyHash,	0_2_00007FF639B7F5FC
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B72600 BCryptDestroyKey,	0_2_00007FF639B72600
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7E57C BCryptSecretAgreement,BCryptDeriveKey,BCryptDestroySecret,BCryptDestroyKey,	0_2_00007FF639B7E57C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7DD8C CryptDecodeObject,CryptImportKey,	0_2_00007FF639B7DD8C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B72574 CryptGenRandom,	0_2_00007FF639B72574
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B858AC BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,	0_2_00007FF639B858AC
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B76840 CryptDestroyKey,free,	0_2_00007FF639B76840
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7E064 free,BCryptDestroyKey,	0_2_00007FF639B7E064
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B85868 CryptReleaseContext,CryptReleaseContext,	0_2_00007FF639B85868
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B79FFC memmove,memmove,CryptEncrypt,	0_2_00007FF639B79FFC
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7681C CryptDestroyKey,	0_2_00007FF639B7681C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B767E4 CryptDestroyKey,	0_2_00007FF639B767E4
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B797F4 CryptDestroyKey,	0_2_00007FF639B797F4
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B797B4 CryptDestroyKey,	0_2_00007FF639B797B4
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7E744 memset,memmove,memmove,memmove,BCryptImportKeyPair,	0_2_00007FF639B7E744
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B79F60 memset,CryptSetKeyParam,	0_2_00007FF639B79F60
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B79774 CryptDestroyKey,	0_2_00007FF639B79774

Source: Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: -----BEGIN RSA PUBLIC KEY-----

memstr_9900e5d1-0

Source: unknown	HTTPS traffic detected: 23.129.64.217:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.127.116.162:443 -> 192.168.2.5:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.87.252.100:443 -> 192.168.2.5:58407 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.101.139.172:443 -> 192.168.2.5:58545 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.58.145.210:443 -> 192.168.2.5:58547 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 205.185.119.222:443 -> 192.168.2.5:58562 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.244.172.37:443 -> 192.168.2.5:58564 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 89.185.85.140:443 -> 192.168.2.5:58565 version: TLS 1.2

Source: Payload 94.75 (2).225.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 96.244.38.131 ports 42901,0,1,2,4,9

Found Tor onion address

Source: Payload 94.75 (2).225.exe	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11e03162c
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh118082,823
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh1141]:993
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000000.00000000.2027564673.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000000.00000000.2027564673.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3285950895.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3285950895.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3284610453.000001D9E1FDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3284610453.000001D9E1FDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh1130000,300
Source: Payload 94.75 (2).225.exe, 00000003.00000000.2161600979.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000003.00000000.2161600979.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000006.00000000.2242244578.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000006.00000000.2242244578.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3284609451.000001B3542DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3284609451.000001B3542DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh110b46f70
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3285952813.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3285952813.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s

Source: unknown

Network traffic detected: IP country count 11

Source: global traffic	TCP traffic: 192.168.2.5:49705 -> 96.244.38.131:42901
Source: global traffic	TCP traffic: 192.168.2.5:49708 -> 144.217.4.166:9001
Source: global traffic	TCP traffic: 192.168.2.5:49712 -> 154.213.184.111:9000
Source: global traffic	TCP traffic: 192.168.2.5:49715 -> 185.141.56.27:9001
Source: global traffic	TCP traffic: 192.168.2.5:49739 -> 140.78.100.19:8443
Source: global traffic	TCP traffic: 192.168.2.5:58360 -> 51.159.195.41:993
Source: global traffic	TCP traffic: 192.168.2.5:58380 -> 45.141.215.21:9700
Source: global traffic	TCP traffic: 192.168.2.5:58504 -> 79.114.91.145:50
Source: global traffic	TCP traffic: 192.168.2.5:58526 -> 155.248.227.210:9001
Source: global traffic	TCP traffic: 192.168.2.5:58532 -> 92.119.124.84:444
Source: global traffic	TCP traffic: 192.168.2.5:58548 -> 185.220.101.3:9004
Source: global traffic	TCP traffic: 192.168.2.5:58558 -> 130.225.244.90:9001

Source: Joe Sandbox View	IP Address: 131.188.40.189 131.188.40.189
Source: Joe Sandbox View	IP Address: 131.188.40.189 131.188.40.189

Source: Joe Sandbox View

JA3 fingerprint: c12f54a3f91dc7bafd92cb59fe009a35

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 52.149.20.212:443 -> 192.168.2.5:49718
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 52.149.20.212:443 -> 192.168.2.5:58368

Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 131.188.40.189User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/640e37801c0f83a8d68105010dfe89302e03162c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/7c6686190ce6e8a0a1a5b5b845bf3f14d252d0df HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/f6691e3eb7cab3c876aaa885e6801b63dc998c39 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/6b4acb7319facb2949d4eb81f73c4decdcd2dfb5 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/6b4acb7319facb2949d4eb81f73c4decdcd2dfb5 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d1a8ac50ef135075a9b43e284caab9b039622776 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d1a8ac50ef135075a9b43e284caab9b039622776 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/70b52cf2b31f63c2ee07e773eea8b760fc717ba9 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/70b52cf2b31f63c2ee07e773eea8b760fc717ba9 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/70b52cf2b31f63c2ee07e773eea8b760fc717ba9 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/3ca0d15567024d2e0b557dc0cf3e962b37999a79 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/3ca0d15567024d2e0b557dc0cf3e962b37999a79 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/885c7b6eb943068b762070e276e299319e5ab08c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/7f26c39059d60e2eef1bcb9a8e7adf7500563c07 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/56909edcdffc04aa38593466f51f3fb2ac63414c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/56909edcdffc04aa38593466f51f3fb2ac63414c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/f88691c71cf4f81b1bb40b05dc05812fc835395f HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/96f8ace10eac14e76cdea4c45679eaffb833f453 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/f88691c71cf4f81b1bb40b05dc05812fc835395f HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/96f8ace10eac14e76cdea4c45679eaffb833f453 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/96f8ace10eac14e76cdea4c45679eaffb833f453 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/1017aee3a184283ae65e7b2a0049cca1490ed7c5 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/1017aee3a184283ae65e7b2a0049cca1490ed7c5 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/1017aee3a184283ae65e7b2a0049cca1490ed7c5 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/124e9120c4ea486f350695a66ab2e75bac1d9036 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/124e9120c4ea486f350695a66ab2e75bac1d9036 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/04f93654100048d48fb8d21eb8434350e94b72a4 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0d7661a33eb9ca44bec3109dbec7f9c5e8abfb02 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/04f93654100048d48fb8d21eb8434350e94b72a4 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/04f93654100048d48fb8d21eb8434350e94b72a4 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c0a86709d4ae38e879426549660e1ad18cc500cd HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c0a86709d4ae38e879426549660e1ad18cc500cd HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/19c64af24e40c2ce5e3ca5231509213230b46f70 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/19c64af24e40c2ce5e3ca5231509213230b46f70 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5378983bc20642c22bd3a4db04445f759ebc09e3 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/baeb4be8c34e480441961e00b54f2280c2c8d19f HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/baeb4be8c34e480441961e00b54f2280c2c8d19f HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/baeb4be8c34e480441961e00b54f2280c2c8d19f HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/e730a4d8bb725a2a27560008024c4dbfaa322835 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:

Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189
Source: unknown	TCP traffic detected without corresponding DNS query: 131.188.40.189

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Code function: 0_2_00007FF639B761C4 recv,WSAGetLastError,

0_2_00007FF639B761C4

Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 131.188.40.189User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/640e37801c0f83a8d68105010dfe89302e03162c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/7c6686190ce6e8a0a1a5b5b845bf3f14d252d0df HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/f6691e3eb7cab3c876aaa885e6801b63dc998c39 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/6b4acb7319facb2949d4eb81f73c4decdcd2dfb5 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/6b4acb7319facb2949d4eb81f73c4decdcd2dfb5 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d1a8ac50ef135075a9b43e284caab9b039622776 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/d1a8ac50ef135075a9b43e284caab9b039622776 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/70b52cf2b31f63c2ee07e773eea8b760fc717ba9 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/70b52cf2b31f63c2ee07e773eea8b760fc717ba9 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/70b52cf2b31f63c2ee07e773eea8b760fc717ba9 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/3ca0d15567024d2e0b557dc0cf3e962b37999a79 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/3ca0d15567024d2e0b557dc0cf3e962b37999a79 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/885c7b6eb943068b762070e276e299319e5ab08c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/7f26c39059d60e2eef1bcb9a8e7adf7500563c07 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/56909edcdffc04aa38593466f51f3fb2ac63414c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/56909edcdffc04aa38593466f51f3fb2ac63414c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/f88691c71cf4f81b1bb40b05dc05812fc835395f HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/96f8ace10eac14e76cdea4c45679eaffb833f453 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/f88691c71cf4f81b1bb40b05dc05812fc835395f HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/96f8ace10eac14e76cdea4c45679eaffb833f453 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/96f8ace10eac14e76cdea4c45679eaffb833f453 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/1017aee3a184283ae65e7b2a0049cca1490ed7c5 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/1017aee3a184283ae65e7b2a0049cca1490ed7c5 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/1017aee3a184283ae65e7b2a0049cca1490ed7c5 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/124e9120c4ea486f350695a66ab2e75bac1d9036 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/124e9120c4ea486f350695a66ab2e75bac1d9036 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/04f93654100048d48fb8d21eb8434350e94b72a4 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0d7661a33eb9ca44bec3109dbec7f9c5e8abfb02 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/04f93654100048d48fb8d21eb8434350e94b72a4 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/04f93654100048d48fb8d21eb8434350e94b72a4 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c0a86709d4ae38e879426549660e1ad18cc500cd HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/c0a86709d4ae38e879426549660e1ad18cc500cd HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/19c64af24e40c2ce5e3ca5231509213230b46f70 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/19c64af24e40c2ce5e3ca5231509213230b46f70 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5378983bc20642c22bd3a4db04445f759ebc09e3 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/baeb4be8c34e480441961e00b54f2280c2c8d19f HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/baeb4be8c34e480441961e00b54f2280c2c8d19f HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/baeb4be8c34e480441961e00b54f2280c2c8d19f HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/e730a4d8bb725a2a27560008024c4dbfaa322835 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:

Source: Payload 94.75 (2).225.exe, Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000000.00000000.2027564673.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3285950895.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3284610453.000001D9E1FDE000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000000.2161600979.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000000.2242244578.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000002.3284609451.000001B3542DE000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000002.3285952813.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000000.00000000.2027564673.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3285950895.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000000.2161600979.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000000.2242244578.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000002.3285952813.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3284609451.000001B3542DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh110b46f70
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3284610453.000001D9E1FDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh1130000
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh1141
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh118082
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11e03162c
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3284841680.000001B3546B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dotsrc.org
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3285851780.000001B354AF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://quetzalcoatl-relays.org
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3285851780.000001B354AF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://quetzalcoatl-relays.org/#support-us
Source: Payload 94.75 (2).225.exe, 00000000.00000003.2053848141.0000013A30CB6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2049922958.0000013A3069C000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2050877731.0000013A307EF000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2054337045.0000013A309D6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2055270993.0000013A30146000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2058185603.0000013A30692000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2054096580.0000013A30146000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2051154711.0000013A309DB000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.2164004230.000001D9E19AD000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.2165622558.000001D9DF946000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.2167998916.000001D9E1666000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000003.2251066681.000001B353962000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000003.2245721449.000001B351C56000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000003.2244009857.000001B353CA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sabotage.net
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3284166019.000001B351C55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digidow.eu/onion
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3284166019.000001B351C55000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digidow.eu/onion-stats/

Source: unknown	Network traffic detected: HTTP traffic on port 58545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58407
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58545
Source: unknown	Network traffic detected: HTTP traffic on port 58407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58562
Source: unknown	Network traffic detected: HTTP traffic on port 58562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 58547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58565 -> 443

Source: unknown	HTTPS traffic detected: 23.129.64.217:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.127.116.162:443 -> 192.168.2.5:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.87.252.100:443 -> 192.168.2.5:58407 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.101.139.172:443 -> 192.168.2.5:58545 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 209.58.145.210:443 -> 192.168.2.5:58547 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 205.185.119.222:443 -> 192.168.2.5:58562 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.244.172.37:443 -> 192.168.2.5:58564 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 89.185.85.140:443 -> 192.168.2.5:58565 version: TLS 1.2

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7A16C memmove,CryptImportKey,	0_2_00007FF639B7A16C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7F42C malloc,memmove,CryptImportKey,free,CryptCreateHash,memset,CryptSetHashParam,CryptHashData,CryptGetHashParam,CryptDestroyHash,CryptDestroyKey,CryptDestroyHash,	0_2_00007FF639B7F42C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7E958 memset,memmove,memmove,memmove,BCryptImportKeyPair,BCryptExportKey,	0_2_00007FF639B7E958
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7DD8C CryptDecodeObject,CryptImportKey,	0_2_00007FF639B7DD8C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7E744 memset,memmove,memmove,memmove,BCryptImportKeyPair,	0_2_00007FF639B7E744

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B727B0	0_2_00007FF639B727B0
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B7793C	0_2_00007FF639B7793C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B72B6C	0_2_00007FF639B72B6C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF639B73E20	0_2_00007FF639B73E20

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Code function: String function: 00007FF639B71720 appears 102 times

Source: classification engine

Classification label: mal72.troj.evad.winEXE@6/1@0/25

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

File created: C:\Users\user\Desktop\cached-consensus

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4296:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5968:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5492:120:WilError_03

Source: Payload 94.75 (2).225.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Payload 94.75 (2).225.exe

ReversingLabs: Detection: 76%

Source: unknown	Process created: C:\Users\user\Desktop\Payload 94.75 (2).225.exe "C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\Desktop\Payload 94.75 (2).225.exe "C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\Desktop\Payload 94.75 (2).225.exe "C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dssenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dssenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dssenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncryptsslp.dll	Jump to behavior

Source: Payload 94.75 (2).225.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: Payload 94.75 (2).225.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: Payload 94.75 (2).225.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ft2mzkczyu			Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ft2mzkczyu			Jump to behavior

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe TID: 6632	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe TID: 6984	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe TID: 6128	Thread sleep time: -60000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: Payload 94.75 (2).225.exe, 00000000.00000002.3284116445.0000013A2E62C000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3284199354.000001D9DF9B8000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Code function: 0_2_00007FF639B71720 GetCurrentThreadId,GetLocalTime,_cwprintf_s_l,

0_2_00007FF639B71720

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	12 Archive Collected Data	22 Encrypted Channel	Exfiltration Over Other Network Medium	1 Data Encrypted for Impact
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	11 Virtualization/Sandbox Evasion	LSASS Memory	1 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Process Injection	Security Account Manager	11 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	3 System Information Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	12 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	1 Proxy	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
Payload 94.75 (2).225.exe	76%	ReversingLabs	Win64.Ransomware.Cryptoff
Payload 94.75 (2).225.exe	100%	Avira	HEUR/AGEN.1358352
Payload 94.75 (2).225.exe	100%	Joe Sandbox ML

Name	Malicious	Reputation
http://193.23.244.244/tor/server/fp/c0a86709d4ae38e879426549660e1ad18cc500cd	false	unknown
http://193.23.244.244/tor/server/fp/96f8ace10eac14e76cdea4c45679eaffb833f453	false	unknown
http://216.218.219.41/tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a	false	unknown
http://193.23.244.244/tor/server/fp/baeb4be8c34e480441961e00b54f2280c2c8d19f	false	unknown
http://193.23.244.244/tor/server/fp/19c64af24e40c2ce5e3ca5231509213230b46f70	false	unknown
http://216.218.219.41/tor/server/fp/d1a8ac50ef135075a9b43e284caab9b039622776	false	unknown
http://45.66.35.11/tor/server/fp/f88691c71cf4f81b1bb40b05dc05812fc835395f	false	unknown
http://193.23.244.244/tor/server/fp/e730a4d8bb725a2a27560008024c4dbfaa322835	false	unknown
http://193.23.244.244/tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c	false	unknown
http://45.66.35.11/tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371	false	unknown
http://216.218.219.41/tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077	false	unknown
http://45.66.35.11/tor/server/fp/3ca0d15567024d2e0b557dc0cf3e962b37999a79	false	unknown
http://45.66.35.11/tor/server/fp/124e9120c4ea486f350695a66ab2e75bac1d9036	false	unknown
http://45.66.35.11/tor/server/fp/0d7661a33eb9ca44bec3109dbec7f9c5e8abfb02	false	unknown
http://193.23.244.244/tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac	false	unknown
http://216.218.219.41/tor/server/fp/7c6686190ce6e8a0a1a5b5b845bf3f14d252d0df	false	unknown
http://45.66.35.11/tor/server/fp/04f93654100048d48fb8d21eb8434350e94b72a4	false	unknown
http://193.23.244.244/tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371	false	unknown
http://45.66.35.11/tor/server/fp/c0a86709d4ae38e879426549660e1ad18cc500cd	false	unknown
http://216.218.219.41/tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce	false	unknown
http://193.23.244.244/tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077	false	unknown
http://45.66.35.11/tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c	false	unknown
http://216.218.219.41/tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac	false	unknown
http://216.218.219.41/tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76	false	unknown
http://45.66.35.11/tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76	false	unknown
http://193.23.244.244/tor/server/fp/1017aee3a184283ae65e7b2a0049cca1490ed7c5	false	unknown
http://216.218.219.41/tor/server/fp/19c64af24e40c2ce5e3ca5231509213230b46f70	false	unknown
http://216.218.219.41/tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c	false	unknown
http://193.23.244.244/tor/server/fp/70b52cf2b31f63c2ee07e773eea8b760fc717ba9	false	unknown
http://45.66.35.11/tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac	false	unknown
http://45.66.35.11/tor/server/fp/f6691e3eb7cab3c876aaa885e6801b63dc998c39	false	unknown
http://193.23.244.244/tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76	false	unknown
http://193.23.244.244/tor/server/fp/04f93654100048d48fb8d21eb8434350e94b72a4	false	unknown
http://45.66.35.11/tor/server/fp/640e37801c0f83a8d68105010dfe89302e03162c	false	unknown
http://216.218.219.41/tor/server/fp/7f26c39059d60e2eef1bcb9a8e7adf7500563c07	false	unknown
http://216.218.219.41/tor/server/fp/3ca0d15567024d2e0b557dc0cf3e962b37999a79	false	unknown
http://216.218.219.41/tor/server/fp/124e9120c4ea486f350695a66ab2e75bac1d9036	false	unknown
http://45.66.35.11/tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077	false	unknown
http://216.218.219.41/tor/server/fp/5378983bc20642c22bd3a4db04445f759ebc09e3	false	unknown
http://45.66.35.11/tor/server/fp/70b52cf2b31f63c2ee07e773eea8b760fc717ba9	false	unknown
http://193.23.244.244/tor/server/fp/56909edcdffc04aa38593466f51f3fb2ac63414c	false	unknown
http://216.218.219.41/tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371	false	unknown
http://45.66.35.11/tor/server/fp/baeb4be8c34e480441961e00b54f2280c2c8d19f	false	unknown
http://193.23.244.244/tor/server/fp/d1a8ac50ef135075a9b43e284caab9b039622776	false	unknown
http://45.66.35.11/tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce	false	unknown
http://45.66.35.11/tor/server/fp/6b4acb7319facb2949d4eb81f73c4decdcd2dfb5	false	unknown
http://216.218.219.41/tor/server/fp/96f8ace10eac14e76cdea4c45679eaffb833f453	false	unknown
http://193.23.244.244/tor/server/fp/f88691c71cf4f81b1bb40b05dc05812fc835395f	false	unknown
http://45.66.35.11/tor/server/fp/885c7b6eb943068b762070e276e299319e5ab08c	false	unknown
http://193.23.244.244/tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a	false	unknown
http://216.218.219.41/tor/server/fp/1017aee3a184283ae65e7b2a0049cca1490ed7c5	false	unknown
http://131.188.40.189/tor/status-vote/current/consensus	false	unknown
http://216.218.219.41/tor/server/fp/6b4acb7319facb2949d4eb81f73c4decdcd2dfb5	false	unknown
http://45.66.35.11/tor/server/fp/56909edcdffc04aa38593466f51f3fb2ac63414c	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://quetzalcoatl-relays.org/#support-us	Payload 94.75 (2).225.exe, 00000006.00000002.3285851780.000001B354AF9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://dotsrc.org	Payload 94.75 (2).225.exe, 00000006.00000002.3284841680.000001B3546B7000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://pm2pavba27wr4m34.onion/command.txt?sh110b46f70	Payload 94.75 (2).225.exe, 00000006.00000002.3284609451.000001B3542DE000.00000004.00000020.00020000.00000000.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?sh11%s	Payload 94.75 (2).225.exe, 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000000.00000000.2027564673.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3285950895.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000000.2161600979.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000000.2242244578.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000002.3285952813.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?sh11e03162c	Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?sh1141	Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp	true	unknown
https://quetzalcoatl-relays.org	Payload 94.75 (2).225.exe, 00000006.00000002.3285851780.000001B354AF9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.digidow.eu/onion	Payload 94.75 (2).225.exe, 00000006.00000002.3284166019.000001B351C55000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://sabotage.net	Payload 94.75 (2).225.exe, 00000000.00000003.2053848141.0000013A30CB6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2049922958.0000013A3069C000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2050877731.0000013A307EF000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2054337045.0000013A309D6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2055270993.0000013A30146000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2058185603.0000013A30692000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2054096580.0000013A30146000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.2051154711.0000013A309DB000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.2164004230.000001D9E19AD000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.2165622558.000001D9DF946000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.2167998916.000001D9E1666000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000003.2251066681.000001B353962000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000003.2245721449.000001B351C56000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000003.2244009857.000001B353CA8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://pm2pavba27wr4m34.onion/command.txt?sh11	Payload 94.75 (2).225.exe, Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000000.00000000.2027564673.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3285950895.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3284610453.000001D9E1FDE000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000000.2161600979.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000000.2242244578.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000002.3284609451.000001B3542DE000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000002.3285952813.00007FF639B86000.00000002.00000001.01000000.00000003.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?sh1130000	Payload 94.75 (2).225.exe, 00000003.00000002.3284610453.000001D9E1FDE000.00000004.00000020.00020000.00000000.sdmp	true	unknown
https://www.digidow.eu/onion-stats/	Payload 94.75 (2).225.exe, 00000006.00000002.3284166019.000001B351C55000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://pm2pavba27wr4m34.onion/command.txt?sh118082	Payload 94.75 (2).225.exe, 00000000.00000002.3285124932.0000013A310F9000.00000004.00000020.00020000.00000000.sdmp	true	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
154.213.184.111	unknown	Seychelles	22769	DDOSING-BGP-NETWORKUS	false
194.87.252.100	unknown	Russian Federation	49392	ASBAXETNRU	false
185.101.139.172	unknown	United States	199524	GCOREAT	false
51.159.195.41	unknown	France	12876	OnlineSASFR	false
144.217.4.166	unknown	Canada	16276	OVHFR	false
185.141.56.27	unknown	United Kingdom	62240	CLOUVIDERClouvider-GlobalASNGB	false
92.119.124.84	unknown	Germany	33657	CMCSUS	false
131.188.40.189	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
216.218.219.41	unknown	United States	6939	HURRICANEUS	false
140.78.100.19	unknown	Austria	1205	JKU-LINZ-ASUniversityLinzAT	false
79.114.91.145	unknown	Romania	8708	RCS-RDS73-75DrStaicoviciRO	false
45.66.35.11	unknown	Netherlands	47482	SPECTRENL	false
45.141.215.21	unknown	Netherlands	62068	SPECTRAIPSpectraIPBVNL	false
130.225.244.90	unknown	Denmark	1835	FSKNET-DKForskningsnettet-DanishnetworkforResearchand	false
143.244.172.37	unknown	United States	174	COGENT-174US	false
209.127.116.162	unknown	Canada	55286	SERVER-MANIACA	false
209.58.145.210	unknown	United States	394380	LEASEWEB-USA-DAL-10US	false
155.248.227.210	unknown	United States	6142	SUN-JAVAUS	false
192.42.116.189	unknown	Netherlands	1101	IP-EEND-ASIP-EENDBVNL	false
89.185.85.140	unknown	Russian Federation	41757	OLIMP-SVYAZ-ASRU	false
23.129.64.217	unknown	United States	396507	EMERALD-ONIONUS	false
96.244.38.131	unknown	United States	701	UUNETUS	true
205.185.119.222	unknown	United States	53667	PONYNETUS	false
193.23.244.244	unknown	Germany	50472	CHAOS-ASDE	false
185.220.101.3	unknown	Germany	208294	ASMKNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1547866
Start date and time:	2024-11-03 09:34:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Payload 94.75 (2).225.exe
Detection:	MAL
Classification:	mal72.troj.evad.winEXE@6/1@0/25
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 57 Number of non-executed functions: 51
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, d.4.1.9.1.6.7.1.0.0.0.0.0.0.0.0.1.0.0.9.0.0.1.f.1.1.1.0.1.0.a.2.ip6.arpa, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Payload 94.75 (2).225.exe

Simulations

Behavior and APIs

Time	Type	Description
03:35:13	API Interceptor	5x Sleep call for process: Payload 94.75 (2).225.exe modified
09:35:03	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ft2mzkczyu C:\Users\user\Desktop\Payload 94.75 (2).225.exe
09:35:12	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run ft2mzkczyu C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
51.159.195.41	uetfu6ZLWZ.exe	Get hash	malicious	Glupteba, RedLine, SmokeLoader, Stealc	Browse
51.159.195.41	Bznx8G6dMz.exe	Get hash	malicious	RedLine, SmokeLoader	Browse
131.188.40.189	6K1uYM85lS.exe	Get hash	malicious	Phorpiex	Browse	131.188.40.189:443/tor/status-vote/current/consensus.z
	R53a3ZJHBQ.exe	Get hash	malicious	SystemBC	Browse	131.188.40.189/tor/status-vote/current/consensus
	i1lq1Qpbyw.exe	Get hash	malicious	SystemBC	Browse	131.188.40.189/tor/status-vote/current/consensus
	iSyDaCjFVY.exe	Get hash	malicious	SystemBC	Browse	131.188.40.189/tor/status-vote/current/consensus
	p9CvI6kq7d.exe	Get hash	malicious	SystemBC	Browse	131.188.40.189/tor/status-vote/current/consensus
	SPXp2YHDFz.exe	Get hash	malicious	Unknown	Browse	131.188.40.189/tor/status-vote/current/consensus
	SPXp2YHDFz.exe	Get hash	malicious	Unknown	Browse	131.188.40.189/tor/status-vote/current/consensus
	ILI1MGzcig.exe	Get hash	malicious	Unknown	Browse	131.188.40.189/tor/status-vote/current/consensus
	lwRhzjuYIg.exe	Get hash	malicious	Unknown	Browse	131.188.40.189/tor/status-vote/current/consensus
	qO7zg5QKAX.exe	Get hash	malicious	Unknown	Browse	131.188.40.189/tor/status-vote/current/consensus
144.217.4.166	file.exe	Get hash	malicious	Quasar, WhiteSnake Stealer	Browse
	c8sDO7umrx.exe	Get hash	malicious	CMSBrute	Browse
	ozJy5Zf5cf.exe	Get hash	malicious	Kronos	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ASBAXETNRU	dvc2TBOZTh.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	194.135.20.4
	teh76E2k50.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	194.135.20.4
	SecuriteInfo.com.Trojan.Siggen29.1091.20762.15518.exe	Get hash	malicious	Xmrig	Browse	45.89.228.144
	bin.armv7l.elf	Get hash	malicious	Mirai	Browse	212.192.15.49
	https://sub.investorscabirigroup.com/4WQbos10596ktJI775idiwtbqpkk1528WGTFCWTFRKDXPVO305927/749609o14	Get hash	malicious	Phisher	Browse	45.147.195.16
	https://sub.investorscabirigroup.com/4tBfEb10596UgJc775rrkvedqhmm1528ZICWGQLYSOBMUOM389951/749609V14	Get hash	malicious	Phisher	Browse	45.147.195.16
	7p6TMfaWhQ.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	45.142.44.233
	SecuriteInfo.com.Trojan.Siggen29.1091.19313.13427.exe	Get hash	malicious	Xmrig	Browse	45.89.228.144
	ppc.elf	Get hash	malicious	Mirai	Browse	212.196.181.191
	1U8CPtG8ip.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	45.142.44.233
OnlineSASFR	A4mmSHCUi2.exe	Get hash	malicious	FormBook	Browse	195.154.200.15
	HmA7s2gaa5.exe	Get hash	malicious	Xmrig	Browse	51.15.193.130
	Pt7TlAjQtn.exe	Get hash	malicious	AveMaria, WhiteSnake Stealer	Browse	195.154.241.145
	ICBM.exe	Get hash	malicious	Xmrig	Browse	51.15.89.13
	ICBM.exe	Get hash	malicious	Xmrig	Browse	51.15.89.13
	boooba.exe	Get hash	malicious	Xmrig	Browse	212.47.253.124
	belks.sh4.elf	Get hash	malicious	Mirai	Browse	62.210.152.252
	Yf4yviDxwF.exe	Get hash	malicious	Xmrig	Browse	51.15.193.130
	file.exe	Get hash	malicious	Xmrig	Browse	163.172.154.142
	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	51.159.148.50
GCOREAT	sh4.elf	Get hash	malicious	Unknown	Browse	5.188.4.164
	https://cambridge.pl/testy-poziomujace	Get hash	malicious	Unknown	Browse	92.223.124.62
	https://beforeitsnews.com/health/2024/10/the-happier-meditation-app-is-offering-free-1-year-access-99-value-3059722.html	Get hash	malicious	Unknown	Browse	92.223.124.62
	https://beforeitsnews.com/health/2024/10/the-happier-meditation-app-is-offering-free-1-year-access-99-value-3059722.html	Get hash	malicious	Unknown	Browse	92.223.124.62
	https://beforeitsnews.com/health/2024/10/the-happier-meditation-app-is-offering-free-1-year-access-99-value-3059722.html	Get hash	malicious	Unknown	Browse	92.223.124.62
	RemotePCViewer.exe	Get hash	malicious	Unknown	Browse	5.188.34.61
	na.elf	Get hash	malicious	Unknown	Browse	92.38.185.13
	https://metaprotradings.com/	Get hash	malicious	Unknown	Browse	92.223.127.181
	https://event.stibee.com/v2/click/NDA4MDIvMjQzOTA2MS80OTAyMzcv/aHR0cHM6Ly9uLm5ld3MubmF2ZXIuY29tL21uZXdzL2FydGljbGUvMDI1LzAwMDMzOTE2NDc_c2lkPTEwMQ	Get hash	malicious	Unknown	Browse	92.223.124.62
	https://securcomau.gurucan.com/66e8e67dd77b5900129b4800	Get hash	malicious	HTMLPhisher	Browse	92.223.124.62
DDOSING-BGP-NETWORKUS	qXFjUCKqYt.exe	Get hash	malicious	Unknown	Browse	154.213.187.170
	nabarm.elf	Get hash	malicious	Unknown	Browse	154.92.250.188
	FBI.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	FBI.mips64.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	FBI.sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	FBI.x86.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	FBI.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	FBI.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	FBI.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206
	FBI.m68k.elf	Get hash	malicious	Gafgyt, Mirai	Browse	154.213.187.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
c12f54a3f91dc7bafd92cb59fe009a35	dnlib.exe	Get hash	malicious	Unknown	Browse	23.129.64.217 194.87.252.100 185.101.139.172 143.244.172.37 209.127.116.162 209.58.145.210 205.185.119.222 89.185.85.140
	2y0EV2jtyQ.exe	Get hash	malicious	Unknown	Browse	23.129.64.217 194.87.252.100 185.101.139.172 143.244.172.37 209.127.116.162 209.58.145.210 205.185.119.222 89.185.85.140
	SecuriteInfo.com.Win32.BankerX-gen.16604.2792.exe	Get hash	malicious	Unknown	Browse	23.129.64.217 194.87.252.100 185.101.139.172 143.244.172.37 209.127.116.162 209.58.145.210 205.185.119.222 89.185.85.140
	FileViewer.exe	Get hash	malicious	Unknown	Browse	23.129.64.217 194.87.252.100 185.101.139.172 143.244.172.37 209.127.116.162 209.58.145.210 205.185.119.222 89.185.85.140
	a6pN09gwZj.exe	Get hash	malicious	Unknown	Browse	23.129.64.217 194.87.252.100 185.101.139.172 143.244.172.37 209.127.116.162 209.58.145.210 205.185.119.222 89.185.85.140
	a6pN09gwZj.exe	Get hash	malicious	Unknown	Browse	23.129.64.217 194.87.252.100 185.101.139.172 143.244.172.37 209.127.116.162 209.58.145.210 205.185.119.222 89.185.85.140
	fL271NVAru.exe	Get hash	malicious	Unknown	Browse	23.129.64.217 194.87.252.100 185.101.139.172 143.244.172.37 209.127.116.162 209.58.145.210 205.185.119.222 89.185.85.140
	yoYRK88Xg2.exe	Get hash	malicious	Unknown	Browse	23.129.64.217 194.87.252.100 185.101.139.172 143.244.172.37 209.127.116.162 209.58.145.210 205.185.119.222 89.185.85.140
	fL271NVAru.exe	Get hash	malicious	Unknown	Browse	23.129.64.217 194.87.252.100 185.101.139.172 143.244.172.37 209.127.116.162 209.58.145.210 205.185.119.222 89.185.85.140
	q8HkBndUpP.exe	Get hash	malicious	Unknown	Browse	23.129.64.217 194.87.252.100 185.101.139.172 143.244.172.37 209.127.116.162 209.58.145.210 205.185.119.222 89.185.85.140

Process:	C:\Users\user\Desktop\Payload 94.75 (2).225.exe
File Type:	ASCII text, with very long lines (1006)
Category:	dropped
Size (bytes):	3349570
Entropy (8bit):	5.543432804114257
Encrypted:	false
SSDEEP:	12288:t11oJxhm/Dbzbs/oP/vfdsdUGzfsCTThFUHyd:t18mrrP4bHhmSd
MD5:	94B33CF167162F33234C9C487AE1231F
SHA1:	936374BA0A6A17D5C34B41824C7DBDB3D6F1A7D4
SHA-256:	964B6E7CBE04F746917CE7448A43E7DB8111C096EF534D652E0C47EAA5024CD9
SHA-512:	C88AADF9AFCDD1EE5F8EA84D2C3F5A3F6EA50789C9C2A406491FA70497DEE885D7D4194641101B9F6668195DA66891234DE1725BD525A0A063CFE474715507DB
Malicious:	false
Reputation:	low
Preview:	network-status-version 3.vote-status consensus.consensus-method 33.valid-after 2024-11-03 08:00:00.fresh-until 2024-11-03 09:00:00.valid-until 2024-11-03 11:00:00.voting-delay 300 300.client-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13.server-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13.known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2.recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2.required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.para

Static File Info

General

File type:	PE32+ executable (console) x86-64, for MS Windows
Entropy (8bit):	6.070474575760456
TrID:	Win64 Executable Console (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Payload 94.75 (2).225.exe
File size:	133'642 bytes
MD5:	9c972cb270fb33444a0f8d12d6176c7d
SHA1:	5a2839d6c6a6327342d51db71b4988aaf053b06f
SHA256:	4b385e050d5a880bee7bfd582d8bf75ff18d0c115c6b30f7d3e86742f7c5dfc1
SHA512:	7adcb3e3333dbd56b174a34c6916001290b391a1cb6f448d88a27ced9b2e7da3217438e7f7c4795b2c111f3e84118a75b7e60f6c0ed7f4a4597b25b9213dfd57
SSDEEP:	1536:Q/+2/nOWZqOLANpK4gBt3aLYom28srd5Xw0s43NB7GDNMiuqA4wUb//uIGTphAtp:Q/BnPGNSq41srYCm28B7Fl7IxcW4
TLSH:	F1D34A7D7EE881FAC0A6C47AD5D18A42F3B2B4021F3A975F04D6132E4F376919E2D126
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L..2..la..la..la..m`..lam.m`..la..mab.laZ.o`..la..e`6.la..n`..laRich..la........................PE..d...T.._.........."......L.

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x140002348
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x5FECCD54 [Wed Dec 30 18:56:20 2020 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	1e6846ec68cd8341fea5c898085896c4

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007FB740C86E6Ch
call 00007FB740C86EFBh
call 00007FB740C85DDAh
int3
xor eax, eax
ret
int3
dec eax
sub esp, 38h
dec eax
mov dword ptr [esp+20h], FFFFFFFEh
call dword ptr [00013F3Dh]
nop
dec eax
add esp, 38h
ret
int3
int3
int3
dec esp
mov ebx, esp
dec ecx
mov dword ptr [ebx+08h], ecx
push edi
dec eax
sub esp, 40h
dec ecx
mov dword ptr [ebx-10h], FFFFFFFEh
dec ecx
mov dword ptr [ebx+18h], ebx
dec eax
mov ebx, edx
dec eax
mov edi, ecx
xor eax, eax
mov dword ptr [esp+30h], eax
dec eax
mov dword ptr [ecx+08h], eax
dec eax
mov dword ptr [ecx+10h], eax
dec eax
mov dword ptr [ecx+18h], eax
mov dword ptr [esp+30h], 00000001h
dec ecx
mov dword ptr [ebx+10h], eax
mov edx, dword ptr [edx+08h]
sub edx, dword ptr [ebx]
dec ecx
lea eax, dword ptr [ebx+10h]
dec ecx
mov dword ptr [ebx-28h], eax
inc ebp
xor ecx, ecx
inc ecx
mov eax, 4000000Ch
dec eax
mov ecx, dword ptr [ebx]
call dword ptr [00013CC1h]
dec eax
mov edx, dword ptr [esp+58h]
dec eax
dec edx
dec eax
mov ecx, edi
call 00007FB740C867BEh
dec esp
mov ecx, dword ptr [edi+08h]
dec eax
mov edx, dword ptr [ebx+08h]
dec eax
sub edx, dword ptr [ebx]
dec ecx
mov eax, ecx
dec eax
neg eax
dec ebp
sbb edx, edx
dec esp
and dword ptr [esp+58h], edx
dec eax
lea eax, dword ptr [esp+58h]
dec eax
mov dword ptr [esp+20h], eax
inc ecx
mov eax, 4000000Ch

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1f760	0xc8	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x22000	0x1230	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x24000	0x15c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x1a7e0	0x38	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x16000	0x320	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x14a44	0x14c00	8ffec25b841e8cca5e4d35eb574d1b3c	False	0.4900578878012048	data	6.265648485221872	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x16000	0xa130	0xa200	1b4f89bd48cc12c70988567f0aeee972	False	0.3666329089506173	data	4.809824534957627	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x21000	0x458	0x200	fe947f3474c7297905847e989f6facd9	False	0.0546875	Matlab v4 mat-file (little endian) \377\377\377\377, text, rows 1, columns 0	0.15842690200323517	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x22000	0x1230	0x1400	e2a232ed643b337858239f293b23a140	False	0.4505859375	data	4.7623224461872224	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x24000	0x15c	0x200	13ce8984733ea2839fc08a851e3d1bb9	False	0.533203125	data	4.101208923073317	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Imports

DLL	Import
bcrypt.dll	BCryptGenRandom, BCryptSetProperty, BCryptCloseAlgorithmProvider, BCryptOpenAlgorithmProvider, BCryptSecretAgreement, BCryptImportKeyPair, BCryptDestroySecret, BCryptDeriveKey, BCryptExportKey, BCryptDestroyKey
CRYPT32.dll	CryptBinaryToStringA, CryptStringToBinaryA, CryptDecodeObject
WS2_32.dll	WSACleanup, inet_addr, inet_ntoa, closesocket, gethostbyname, WSAStartup, send, socket, connect, recv, htons, setsockopt, WSAGetLastError
Secur32.dll	InitSecurityInterfaceA
KERNEL32.dll	CreateThread, TerminateThread, GetModuleFileNameA, Sleep, GetConsoleWindow, GetConsoleScreenBufferInfo, SetConsoleTextAttribute, GetStdHandle, GetCurrentThreadId, GetLocalTime, GetTickCount, GetCommandLineW, LocalFree, GetEnvironmentVariableA, LoadLibraryA, ReadFile, WriteFile, SetFilePointer, GetFileAttributesA, CreateFileA, CloseHandle, GetFileSize, FlushFileBuffers, WaitForSingleObject, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection
USER32.dll	ShowWindow
ADVAPI32.dll	RegEnumValueA, RegSetValueExA, CryptSetHashParam, CryptDuplicateHash, CryptEncrypt, CryptSetKeyParam, CryptImportKey, CryptDestroyKey, CryptCreateHash, CryptHashData, CryptDestroyHash, RegQueryInfoKeyA, RegCloseKey, CryptReleaseContext, RegOpenKeyExA, CryptGetHashParam, CryptGenRandom, CryptAcquireContextA
SHELL32.dll	CommandLineToArgvW
msvcrt.dll	__CxxFrameHandler3, atexit, vprintf, free, malloc, vsprintf_s, _vscprintf, sscanf, _mkgmtime, time, wcstombs, memmove, memchr, memcmp, memcpy, memset

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-03T09:35:18.343489+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	52.149.20.212	443	192.168.2.5	49718	TCP
2024-11-03T09:35:47.305346+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	52.149.20.212	443	192.168.2.5	58368	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 3, 2024 09:34:59.418977022 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:34:59.423847914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:34:59.427464008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:34:59.428762913 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:34:59.433540106 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.475833893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.475855112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.475864887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.475878000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.475889921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.475900888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.475913048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.476072073 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.476074934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.476094961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.476105928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.476214886 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.480936050 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.480984926 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.480995893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.481041908 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.629622936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.629643917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.629657030 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.629671097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.629684925 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.629746914 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.629820108 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.630023003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.630038023 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.630073071 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.630337000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.630348921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.630361080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.630381107 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.630395889 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.630517960 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.630531073 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.630583048 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.631468058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.631480932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.631491899 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.631517887 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.631611109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.631624937 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.631658077 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.632313013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.632359028 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.632498980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.632510900 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.632522106 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.632553101 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.670537949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.670553923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.670566082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:00.670592070 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:00.670617104 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.007982969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008008003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008021116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008033037 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008044958 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008157015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008173943 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008207083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008219957 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008232117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008264065 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.008264065 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.008264065 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.008264065 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.008498907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008521080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008538008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008549929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008558035 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.008563042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008575916 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008585930 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008585930 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.008598089 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008610010 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008618116 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.008620977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008635044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.008647919 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.008671999 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.009232044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009244919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009255886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009267092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009274006 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.009279966 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009287119 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.009299040 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009310961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009319067 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.009322882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009335995 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009346962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009361029 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009363890 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.009371996 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009372950 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.009386063 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009398937 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009411097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009408951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.009418011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.009424925 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.009449959 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.010158062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.010170937 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.010180950 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.010193110 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.010193110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.010205984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.010216951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.010225058 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.010262012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.011205912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.011219025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.011230946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.011244059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.011256933 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.011288881 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.013243914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013289928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013300896 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013391972 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013402939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013407946 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.013416052 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013441086 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.013750076 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013761044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013768911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013814926 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.013840914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013853073 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013864994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.013920069 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.014615059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.014657974 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.014659882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.014672995 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.014712095 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.014744997 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.014755011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.014766932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.014791965 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.015489101 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.015506983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.015518904 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.015531063 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.015557051 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.015630007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.015642881 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.015654087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.015672922 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.016396999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.016438007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.016449928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.016571999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.016582966 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.016593933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.016716957 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.017343044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.017355919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.017368078 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.017472982 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.017484903 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.017493010 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.017518044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.017532110 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.018420935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.018438101 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.018467903 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.018527031 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.018570900 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.018630028 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.018640995 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.018651962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.018672943 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.019112110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.019165039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.019177914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.019180059 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.019215107 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.019316912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.019330025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.019366026 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.019431114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.020092964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.020150900 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.020164013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.020204067 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.020299911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.020311117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.020323038 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.020342112 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.020925999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.020982981 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.021044970 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.021239042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.021250010 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.021261930 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.021284103 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.021301985 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.021382093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.021400928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.021414042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.021436930 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.022428036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.022440910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.022452116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.022464037 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.022473097 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.022476912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.022496939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.022500038 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.022521973 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.023245096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.023257017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.023288012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.023410082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.023422956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.023449898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.023456097 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.023488045 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.023540974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.023552895 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.023564100 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.023565054 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.023590088 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.023628950 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.024297953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.024348021 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.024352074 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.024432898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.024445057 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.024456978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.024470091 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.024472952 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.024493933 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.025098085 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.025157928 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.025276899 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.025320053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.025330067 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.025358915 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.025440931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.025453091 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.025464058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.025526047 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.026159048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.026220083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.026231050 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.026264906 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.026308060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.026345968 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.043672085 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.043704987 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.069751024 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.069777012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.069787979 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.069861889 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.069883108 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.069942951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.086627007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.086678982 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.086690903 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.086775064 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.086788893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.086802959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.086815119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.086827040 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.086836100 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.086870909 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.086965084 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.086978912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.087002039 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.087066889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.087080956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.087111950 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.088340998 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088397026 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088404894 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.088411093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088455915 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.088538885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088551044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088562012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088573933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088586092 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.088603020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088603973 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.088663101 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088706017 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.088727951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088740110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088794947 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.088845015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088856936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088870049 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088882923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.088897943 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.088927984 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.089020967 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089032888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089066029 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.089113951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089128017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089138985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089154959 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.089322090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089334011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089345932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089365005 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089370012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.089390993 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.089445114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089457989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089468002 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089483023 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.089504004 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.089581966 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089593887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089605093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089617968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089623928 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.089663029 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.089709997 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089803934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089819908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089844942 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.089903116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089914083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089935064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089950085 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.089951038 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.089979887 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.090107918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090120077 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090145111 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.090225935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090238094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090250015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090261936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090270042 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.090275049 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090286016 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.090326071 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.090459108 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090471983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090523005 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.090594053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090610981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090622902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090635061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090645075 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.090648890 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090675116 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.090846062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090857983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090871096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.090892076 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.090919971 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.091054916 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091068029 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091078997 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091111898 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.091200113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091212034 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091223001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091233969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091237068 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.091248989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091260910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091257095 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.091275930 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091284037 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.091325045 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.091499090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091579914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091592073 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091603994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091614008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091620922 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.091635942 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.091713905 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091753006 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.091798067 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091815948 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091826916 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091839075 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.091850042 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.091880083 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.092075109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092123032 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092140913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092153072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092163086 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.092171907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092184067 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092190981 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.092196941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092209101 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092217922 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.092221022 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092233896 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092243910 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.092247009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092273951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.092631102 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092680931 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.092752934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092763901 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092775106 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092788935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092802048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092809916 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.092828989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.092948914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092961073 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092972994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092983961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.092993021 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.092994928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093015909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093019009 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.093029022 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093039989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.093064070 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.093344927 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093363047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093374014 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093385935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093399048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093410015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093421936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093457937 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.093507051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093564034 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093575954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093616962 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.093691111 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093703032 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093713999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093725920 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093746901 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.093774080 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.093866110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093878031 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093908072 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.093936920 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093949080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093961000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093974113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093985081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.093987942 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.093998909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094012022 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094028950 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094260931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094273090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094285011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094296932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094307899 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094314098 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094331980 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094475985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094494104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094505072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094516993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094523907 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094532013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094537973 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094547987 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094567060 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094722986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094736099 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094747066 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094758034 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094769001 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094778061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094790936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094799042 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094805956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094827890 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094831944 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094841003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094850063 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094851971 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094866037 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094877005 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.094887018 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.094902039 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.095235109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095247984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095278025 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.095330954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095341921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095354080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095374107 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.095396996 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.095463991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095477104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095488071 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095515013 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.095624924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095642090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095654964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095664024 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.095668077 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095683098 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.095695972 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.095721960 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.111644030 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111660004 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111670971 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111737013 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.111771107 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111783981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111794949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111807108 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111816883 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.111819983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111840963 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111850977 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.111874104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111879110 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.111917019 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.111917973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111932039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.111969948 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.112107992 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.112119913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.112131119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.112143040 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.112155914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.112163067 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.112169981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.112183094 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.112183094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.112210035 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.112281084 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.112320900 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.140559912 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.140629053 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.216816902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.216834068 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.216847897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.216860056 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.216906071 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.216934919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.216948986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.216967106 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.216989994 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.217020035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.217032909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.217045069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.217082977 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.233578920 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.233601093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.233612061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.233647108 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.233673096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.233690977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.233691931 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.233741999 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.242599964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.242630005 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.242641926 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.242677927 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.242758989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.242774963 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.242785931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.242806911 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.242830038 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.242850065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.242866993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.242878914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.242911100 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.242944002 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.242954969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.242984056 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243063927 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243076086 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243088007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243099928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243113995 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243128061 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243212938 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243253946 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243264914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243279934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243290901 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243304014 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243324041 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243341923 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243438959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243452072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243465900 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243488073 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243511915 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243525982 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243535995 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243549109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243551016 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243562937 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243575096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243576050 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243587017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243607998 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243626118 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243829012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243841887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243854046 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243870020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243880987 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243891954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243899107 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243905067 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243917942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243933916 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.243935108 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.243968010 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244153023 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244164944 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244175911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244187117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244193077 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244199991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244211912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244215965 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244225979 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244252920 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244265079 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244288921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244364977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244376898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244388103 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244400978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244411945 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244431973 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244446039 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244477034 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244668961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244680882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244692087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244704008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244715929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244718075 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244730949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244743109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244744062 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244754076 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244765043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244771004 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244781017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244791985 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244791985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244812965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244827032 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244829893 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244838953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244848013 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244851112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244864941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244869947 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244878054 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244889021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244903088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244910002 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244914055 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244925976 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244925976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244939089 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244951010 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244956017 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.244962931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.244976044 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.245011091 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.245628119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245640039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245650053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245661020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245671988 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245681047 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.245685101 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245697975 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245698929 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.245709896 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245722055 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245723963 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.245734930 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245743036 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.245747089 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245760918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245770931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245781898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245784998 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.245795012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245807886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.245811939 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.245831966 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.245841026 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246171951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246182919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246190071 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246196032 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246206045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246216059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246226072 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246227980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246241093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246252060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246256113 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246265888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246278048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246279001 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246290922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246311903 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246314049 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246325016 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246335983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246337891 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246350050 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246361017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246365070 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246373892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246386051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246395111 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246398926 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246407986 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246412992 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246426105 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246438026 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246447086 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246453047 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246453047 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246460915 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.246486902 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246862888 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.246903896 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247090101 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247103930 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247113943 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247127056 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247133017 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247138977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247145891 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247153044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247165918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247175932 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247184992 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247196913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247205973 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247206926 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247220039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247237921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247242928 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247251034 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247263908 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247266054 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247278929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247291088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247293949 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247302055 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247318983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247329950 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247333050 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247342110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247348070 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247354984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247368097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247378111 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247383118 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247395039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247399092 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247409105 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247420073 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.247422934 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.247448921 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248121023 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248131990 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248142004 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248158932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248162985 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248172045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248177052 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248184919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248197079 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248208046 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248219967 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248224974 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248233080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248244047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248249054 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248255968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248269081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248280048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248291016 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248291016 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248301029 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248307943 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248316050 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248328924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248332024 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248341084 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248353004 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248356104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248372078 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248383999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248385906 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248398066 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248408079 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248415947 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248420000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248431921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.248435974 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.248461008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249069929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249083042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249093056 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249104023 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249109983 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249115944 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249128103 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249136925 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249142885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249155045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249165058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249166012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249180079 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249186993 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249192953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249202013 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249205112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249217987 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249229908 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249229908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249243021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249252081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249258995 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249264002 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249273062 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249277115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249290943 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249303102 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249309063 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249317884 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249321938 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249367952 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249794006 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249813080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249824047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249835968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249851942 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249854088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249866962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249876022 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249877930 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249891043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249903917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249905109 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249914885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249927998 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249928951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249939919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249950886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249950886 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249963045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249974012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.249977112 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.249985933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250000000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250013113 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250015020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250029087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250041008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250041008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250051975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250082016 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250376940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250390053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250401974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250421047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250437975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250439882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250453949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250468016 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250473976 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250478983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250499010 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250519991 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250525951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250536919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250547886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250560045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250571966 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250582933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250586033 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250602961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250612974 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250617027 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250627995 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250629902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250643969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250654936 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250655890 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250669003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250679970 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250684977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250698090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250714064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250715017 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250726938 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250734091 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250740051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250755072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250768900 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250780106 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250782013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.250807047 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.250816107 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251281977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251295090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251307964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251333952 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251429081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251441956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251452923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251465082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251473904 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251477003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251490116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251497984 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251497984 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251502991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251516104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251518965 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251528025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251538992 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251543999 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251550913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251563072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251570940 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251581907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251585960 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251595020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251609087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251619101 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251624107 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251637936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251646042 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251653910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251667976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251674891 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251683950 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251698971 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251703978 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251713991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251727104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251740932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251741886 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251753092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.251770020 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251794100 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251889944 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.251915932 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252361059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252373934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252384901 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252397060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252408028 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252423048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252434969 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252445936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252455950 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252460957 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252473116 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252475977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252491951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252500057 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252511024 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252525091 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252525091 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252537966 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252549887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252563953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252566099 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252577066 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252588034 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252590895 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252604008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252614975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252619028 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252634048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252643108 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252648115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252660036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252674103 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252679110 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252686977 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252690077 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252702951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252717018 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252728939 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252733946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252744913 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.252749920 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252767086 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.252795935 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253323078 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253335953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253345013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253359079 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253360033 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253380060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253388882 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253392935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253408909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253416061 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253422976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253438950 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253444910 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253452063 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253473043 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253473997 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253488064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253500938 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253504992 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253514051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253530025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253535032 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253544092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253560066 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253562927 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253572941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253587008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253597975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253601074 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253616095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253623009 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253628969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253645897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253652096 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253662109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253674984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253690958 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253690958 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253709078 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253711939 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253720999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253739119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253742933 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.253751993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.253779888 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.254139900 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254153013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254164934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254178047 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.254179955 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254195929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254201889 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.254228115 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.254292965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254304886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254316092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254328966 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254338026 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.254343033 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254362106 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.254534006 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254547119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254559040 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254573107 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254578114 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.254586935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254592896 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.254602909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254617929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254620075 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.254631042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254645109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254657984 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.254657984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254676104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.254681110 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.254709959 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.256386995 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.260967016 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.260982037 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.260993958 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.261032104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.261035919 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.261045933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.261082888 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.261858940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.261889935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.261903048 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.261903048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.261939049 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.262026072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.262038946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.262051105 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.262065887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.262073040 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.262080908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.262100935 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.262171030 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.262182951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.262192965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.262211084 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.262237072 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.393245935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393261909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393274069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393346071 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393357992 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393366098 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.393371105 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393384933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393431902 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.393471003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393482924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393493891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393505096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393512011 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.393520117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393532991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393536091 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.393546104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.393564939 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.393594027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.394057989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.394069910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.394081116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.394099951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.394134998 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.394146919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.394159079 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.394171000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.394172907 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.394201040 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.395209074 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395220041 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395231962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395255089 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.395268917 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.395292044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395304918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395324945 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395338058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395349979 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.395365953 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.395390034 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395469904 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395509005 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.395523071 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395539045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395570040 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395576954 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.395581961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395595074 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395621061 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.395658016 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395668983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.395699024 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396327972 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396373987 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396394968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396409988 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396447897 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396476984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396488905 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396503925 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396517038 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396517038 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396533966 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396567106 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396605968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396619081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396645069 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396703959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396716118 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396728039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396739960 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396743059 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396752119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396770954 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396785975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396832943 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396852016 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396857977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396869898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396882057 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396908998 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396920919 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396923065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396934986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396949053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396962881 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.396970034 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.396991014 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397190094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397203922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397213936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397226095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397237062 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397238016 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397250891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397263050 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397264004 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397274971 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397289038 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397305012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397325039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397336960 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397365093 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397367954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397381067 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397392035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397403955 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397437096 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397634983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397651911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397664070 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397679090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397690058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397691965 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397701025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397713900 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397725105 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397726059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397737980 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397739887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397753954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397767067 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397768974 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397778034 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397789955 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397795916 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397803068 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397815943 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397818089 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397835016 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.397845030 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.397878885 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398080111 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398094893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398107052 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398118973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398125887 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398130894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398152113 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398231983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398246050 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398257017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398269892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398273945 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398288965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398300886 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398300886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398314953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398325920 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398332119 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398338079 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398350954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398360968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398365021 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398372889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398385048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398391962 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398396969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398410082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398411989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398423910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398433924 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398436069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398449898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398453951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398462057 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398474932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398474932 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398488998 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398502111 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.398503065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.398540974 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399164915 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399179935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399192095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399205923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399210930 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399225950 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399235964 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399240017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399252892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399266005 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399271011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399296999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399300098 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399310112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399327993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399331093 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399338961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399352074 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399362087 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399363995 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399378061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399388075 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399388075 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399400949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399408102 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399414062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399425983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399435997 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399441957 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399447918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399461031 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399472952 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399473906 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399483919 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399490118 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399506092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399522066 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399537086 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399553061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399554968 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399566889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399604082 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399604082 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399605036 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.399960041 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399975061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.399988890 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400003910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400017023 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400027990 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400036097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400089979 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400089979 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400121927 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400140047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400154114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400166035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400180101 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400181055 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400193930 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400202990 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400206089 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400221109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400243998 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400259018 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400274038 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400275946 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400275946 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400290012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400305986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400320053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400331974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400342941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400363922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400378942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400392056 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400407076 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400422096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400437117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400449991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400461912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400470018 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400470018 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400470018 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400470018 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400470018 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400470018 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400476933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400491953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400502920 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400506973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400516987 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400520086 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400527000 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400536060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400556087 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400886059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400897980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400909901 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400923014 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400924921 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400934935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400949001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400949001 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400962114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.400983095 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.400993109 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401046991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401060104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401070118 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401082039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401093960 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401096106 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401106119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401119947 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401124954 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401133060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401144981 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401145935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401159048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401170015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401180983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401187897 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401201010 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401212931 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401216030 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401223898 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401227951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401240110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401251078 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401257992 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401271105 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401279926 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401283026 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401297092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401309967 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401316881 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401319027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401323080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401329994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401341915 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401350975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401355028 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401375055 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401408911 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.401983023 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.401995897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402005911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402018070 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402030945 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402033091 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402041912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402054071 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402065039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402069092 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402077913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402089119 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402089119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402101994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402112007 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402115107 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402123928 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402127981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402148008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402156115 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402159929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402173042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402184010 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402195930 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402196884 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402208090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402220964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402221918 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402232885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402241945 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402245045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402252913 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402257919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402270079 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402282000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402285099 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402293921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402304888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402316093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402317047 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402323961 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402328968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402342081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402354956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402364016 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402367115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402379990 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402389050 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402393103 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402414083 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402439117 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.402945995 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402964115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402981043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.402993917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403004885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403014898 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403014898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403028011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403029919 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403039932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403052092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403062105 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403064966 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403078079 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403079033 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403099060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403106928 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403111935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403124094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403134108 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403136969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403150082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403162003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403182030 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403197050 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403417110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403435946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403446913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403459072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403459072 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403470993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403484106 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403487921 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403496027 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403506994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403515100 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403521061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403532982 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403533936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403548002 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403558969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403568983 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403572083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403584003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403594971 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403599024 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403606892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403618097 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403620958 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403633118 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403661013 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403774023 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403790951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403804064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403816938 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.403832912 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.403851032 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.404393911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.404444933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.404458046 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.404484987 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.404520988 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.404557943 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.438958883 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.443793058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.443818092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.443830013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.443850040 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.443880081 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.443917036 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.443943977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.443957090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.443974972 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.443985939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.443986893 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444000006 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444031954 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444134951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444147110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444161892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444174051 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444174051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444190025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444200039 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444201946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444215059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444227934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444231987 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444247961 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444417953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444430113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444439888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444453001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444461107 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444466114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444478035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444487095 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444489956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444503069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444505930 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444514990 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444526911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444531918 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444540024 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444551945 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444557905 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444565058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444581985 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444617987 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444698095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444709063 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444720030 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444732904 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444744110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444744110 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444756985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444772005 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444792032 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444844961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444856882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444869041 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444880962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444897890 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444909096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.444909096 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444920063 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444941998 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.444998026 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445012093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445023060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445034981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445044994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445055962 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445059061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445071936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445082903 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445084095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445096970 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445102930 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445111036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445127964 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445127964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445142984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445151091 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445162058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445188046 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445367098 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445379972 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445390940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445401907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445415020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445420027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445431948 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445435047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445447922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445458889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445462942 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445472002 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445482969 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445483923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445497990 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445511103 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445521116 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445547104 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445719004 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445732117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445743084 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445755959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445755959 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445770025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445780993 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445781946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445796013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445811987 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445831060 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445861101 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445873976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445883989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445895910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445907116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445918083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445919991 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445930958 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445944071 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445947886 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445956945 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445967913 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.445967913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445981979 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.445993900 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446008921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446019888 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446026087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446038008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446048975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446049929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446064949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446074963 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446074963 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446088076 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446099043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446101904 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446111917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446122885 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446124077 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446137905 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446149111 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446161985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446162939 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446177006 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446190119 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446190119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446203947 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446208954 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446217060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446243048 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446259022 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446790934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446804047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446815968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446827888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446837902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446849108 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446850061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446862936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446875095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446881056 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446887970 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446898937 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446902037 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446909904 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446911097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446926117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446943045 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446943045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446959019 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446969986 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.446969986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.446990013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447002888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447005987 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447015047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447027922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447032928 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447041035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447052956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447062016 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447065115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447077990 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447077990 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447089911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447101116 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447102070 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447114944 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447127104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447138071 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447139025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447150946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447163105 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447165012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447175980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447185040 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447189093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447202921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447204113 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447215080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447227955 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447227955 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447243929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447256088 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447293043 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447787046 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447801113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447812080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447824001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447835922 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447841883 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447854996 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447865009 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447868109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447880983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447891951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447892904 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447905064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447916031 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447921991 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447930098 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447946072 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447948933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447962999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447969913 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.447976112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.447988987 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448000908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448004007 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.448014021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448023081 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.448025942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448040009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448050976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448061943 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448069096 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.448080063 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448096037 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.448101044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448107004 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.448113918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448124886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448133945 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.448137045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448149920 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448162079 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448168993 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.448174953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448187113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448199034 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448200941 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.448211908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.448225975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.448246956 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449150085 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449162006 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449172974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449186087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449198008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449199915 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449209929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449218035 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449223995 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449234962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449239969 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449250937 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449265003 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449291945 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449592113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449604988 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449615955 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449628115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449640036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449652910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449660063 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449680090 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449693918 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449745893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449758053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449768066 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449780941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449791908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449796915 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449805021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449816942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449822903 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449830055 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449841022 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449842930 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449853897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449866056 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449872971 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449883938 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449896097 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449896097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449912071 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449923038 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449932098 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449934959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449948072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449959040 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449959993 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449971914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449980021 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449984074 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.449995995 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.449999094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450012922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450026989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.450032949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450043917 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.450046062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450058937 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450069904 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450082064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450086117 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.450093985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450105906 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450114012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.450117111 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450129986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450138092 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.450141907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450153112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450156927 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.450166941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450177908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450181007 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.450191021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450202942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.450212955 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.450229883 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451191902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451205015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451217890 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451230049 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451230049 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451242924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451251030 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451255083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451268911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451281071 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451281071 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451294899 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451308012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451324940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451327085 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451337099 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451344013 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451351881 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451364994 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451365948 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451395035 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451687098 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451700926 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451716900 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451726913 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451728106 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451739073 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451751947 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451759100 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451770067 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451850891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451864004 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451875925 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451890945 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451891899 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451905012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451913118 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451916933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451929092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451937914 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451941013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451952934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451963902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451975107 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.451982021 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.451994896 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452006102 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452008009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452013016 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452016115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452023029 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452033043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452045918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452056885 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452058077 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452070951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452083111 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452085018 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452094078 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452102900 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452105999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452117920 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452131033 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452142000 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452147961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452162981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452166080 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452174902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452183008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452188015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452199936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452214956 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452222109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452234030 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452240944 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452244997 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452260017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452265978 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452270985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452285051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452294111 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452296019 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452308893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452318907 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452320099 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452332020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452344894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452346087 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452357054 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452368975 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452373028 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452382088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452394962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452399969 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452414989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452780962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452795029 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452805996 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452820063 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452828884 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452833891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452847958 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452852011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452873945 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452934980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452948093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452959061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452970982 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452977896 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452982903 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.452987909 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.452996969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453010082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453018904 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453022957 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453037024 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453048944 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453053951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453073978 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453085899 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453099012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453109980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453121901 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453125954 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453134060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453146935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453149080 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453160048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453172922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453178883 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453186035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453197956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453198910 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453208923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453222036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453224897 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453239918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453253031 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453253031 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453265905 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453278065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453289032 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453289986 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453300953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453313112 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453320026 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453332901 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453337908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453350067 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453361034 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453366995 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453373909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453387022 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453387976 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453399897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453412056 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453412056 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453423977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453435898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453442097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453448057 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453448057 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453459024 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453471899 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453484058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453490973 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453495979 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453500032 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453524113 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453861952 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453875065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453886032 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453900099 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453902960 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453912020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453921080 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.453924894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.453944921 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.454003096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.454015970 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.454026937 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.454040051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.454041958 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.454051018 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.454063892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.454067945 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.454077005 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.454087019 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.454128981 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.464143991 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.464248896 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.545881033 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.545893908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.545905113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.545924902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.545938015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.545949936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.545962095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546010971 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546020985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546031952 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546044111 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546093941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546104908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546116114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546116114 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.546116114 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.546116114 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.546129942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546138048 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.546144009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546169996 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.546180010 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546191931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546199083 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.546216965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546226978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546238899 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.546278954 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.546308994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546322107 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546334028 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546344042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.546386003 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.547983885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.547995090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548053980 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.548077106 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548089027 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548100948 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548118114 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.548129082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548141003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548154116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548176050 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.548201084 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.548448086 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548460007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548471928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548492908 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.548516035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548528910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548561096 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.548737049 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548773050 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.548777103 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551346064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551369905 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551382065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551389933 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551395893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551412106 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551417112 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551425934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551438093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551461935 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551486969 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551496029 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551508904 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551526070 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551537991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551548958 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551558018 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551562071 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551574945 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551577091 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551593065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551601887 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551606894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551649094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551660061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551664114 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551673889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551687956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551688910 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551700115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551721096 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551749945 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551791906 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551809072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551820993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551831961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551843882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551851034 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551860094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551872015 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551873922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551887035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551898956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551899910 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551911116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551923037 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551939964 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551940918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551954031 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551964045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551964998 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551978111 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.551984072 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.551990986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552004099 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552011967 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552015066 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552030087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552042961 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552043915 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552056074 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552057028 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552083015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552092075 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552095890 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552115917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552120924 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552129030 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552146912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552160025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552166939 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552170992 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552181959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552187920 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552201986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552212954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552215099 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552225113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552252054 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552273035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552274942 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552285910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552298069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552309036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552325010 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552328110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552341938 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552351952 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552352905 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552365065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552376986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552383900 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552387953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552400112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552407026 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552436113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552438974 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552448988 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552460909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552474976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552484035 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552488089 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552499056 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552510977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552512884 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552525997 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552537918 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552572012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552604914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552615881 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552628040 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552639961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552642107 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552651882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552664042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552666903 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552695990 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552699089 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552712917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552723885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552735090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552737951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552747965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552758932 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552788019 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552830935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552843094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552854061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552865982 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552876949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552890062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552901030 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552902937 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552915096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552926064 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552933931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552951097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552953005 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.552964926 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552975893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.552988052 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553003073 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553114891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553127050 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553138018 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553149939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553160906 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553173065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553181887 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553185940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553199053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553209066 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553210974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553224087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553236008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553252935 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553255081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553267956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553280115 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553281069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553293943 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553297997 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553308964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553322077 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553328037 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553334951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553354025 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553355932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553369999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553378105 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553383112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553395987 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553407907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553419113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553422928 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553432941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553452969 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553467989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553494930 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553512096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553523064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553535938 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553539038 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553548098 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553560972 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553564072 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553601027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553627014 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553638935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553649902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553663969 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553668976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553680897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553689957 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553694010 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553706884 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553719044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553721905 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553731918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553742886 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553745031 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553757906 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553771019 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553780079 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553782940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553797007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553807974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553816080 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553828001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553836107 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553845882 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553845882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553860903 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553877115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553889990 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553890944 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553905010 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553915977 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553951979 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.553971052 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553982973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.553993940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554006100 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554017067 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554018021 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554028988 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554042101 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554044962 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554070950 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554137945 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554156065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554167032 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554179907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554181099 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554192066 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554203033 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554213047 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554214954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554228067 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554238081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554239988 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554250002 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554258108 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554263115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554277897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554290056 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554296970 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554308891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554316044 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554321051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554332018 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554338932 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554343939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554366112 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554377079 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554389000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554399967 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554400921 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554413080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554425001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554425001 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554438114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554450035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554460049 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554478884 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554699898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554712057 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554723024 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554733992 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554737091 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554745913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554758072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554766893 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554770947 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554784060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554795027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554795980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554807901 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554816961 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554827929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554840088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554846048 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554852009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554864883 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554877043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554877996 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554891109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554900885 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554903984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554914951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554922104 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554925919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554939985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554946899 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554951906 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554965973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554976940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.554985046 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.554989100 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555003881 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555016041 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555197001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555210114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555219889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555232048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555238008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555248976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555260897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555265903 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555273056 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555285931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555290937 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555298090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555309057 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555310011 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555327892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555339098 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555349112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555361032 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555361032 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555373907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555381060 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555392981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555403948 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555417061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555425882 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555428982 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555442095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555449009 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555454969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555476904 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555478096 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555490017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555501938 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555507898 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555515051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555526972 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555527925 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555541039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555552959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555558920 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555560112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555572033 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555584908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.555598021 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.555630922 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.558043003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558054924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558065891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558084965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558095932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558108091 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558124065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558136940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558149099 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558263063 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558274984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558285952 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558298111 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558309078 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558320999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558336020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558404922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558415890 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558425903 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558444977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558458090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558468103 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558480024 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558490038 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558507919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558518887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558531046 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558542013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558552980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558567047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558588982 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558600903 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558613062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558743954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558756113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558767080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558779001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558789968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558801889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558813095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558825016 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558844090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558856964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558866978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558878899 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558892012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558903933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558916092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558927059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558938980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558950901 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558962107 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558981895 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.558991909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559001923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559015036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559025049 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559037924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559130907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559142113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559153080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559165001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559180021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559192896 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559202909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559214115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559226036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559237003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559256077 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559268951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559281111 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559293032 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559303999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559322119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559336901 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559350014 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559364080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559375048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559386015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559401035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559421062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559432983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559444904 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559459925 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559470892 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559472084 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559485912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559499025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559509993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559520960 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559524059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559537888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559551001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559568882 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559588909 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559762955 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559775114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559786081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559798956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559808969 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559813976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559827089 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559832096 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559839964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559851885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559853077 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559864998 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559875965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559885025 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559887886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559901953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559912920 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559921980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559931993 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559935093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559948921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559957027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559959888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559973001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559983969 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.559984922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.559998989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560009956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560019970 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560024977 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560034990 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560048103 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560055971 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560067892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560079098 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560089111 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560091019 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560102940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560113907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560118914 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560127020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560132980 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560138941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560151100 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560162067 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560163975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560174942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560183048 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560190916 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560203075 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560214043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560220003 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560226917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560237885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560240984 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560250044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560261011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560269117 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560273886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560286045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560286999 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560298920 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560311079 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560322046 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560323000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560336113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560358047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560364008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560364008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560370922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560384989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560394049 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560395002 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560420990 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560611963 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560626030 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560637951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560652971 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560678959 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560764074 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560776949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560787916 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560798883 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560811043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560811996 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560823917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560837984 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560838938 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560853004 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560864925 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560866117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560878992 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560889006 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560889959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560909033 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560910940 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560923100 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560935974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560946941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560952902 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560959101 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560971975 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560972929 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.560985088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560997009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.560997963 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561009884 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561022997 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561033964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561036110 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561052084 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561062098 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561064959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561078072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561081886 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561089993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561100960 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561105013 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561115026 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561126947 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561139107 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561148882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561160088 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561161995 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561173916 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561181068 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561186075 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561199903 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561204910 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561212063 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561223984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561233044 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561237097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561249971 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561260939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561270952 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561270952 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561284065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561295033 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561295033 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561309099 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561321974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561323881 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561333895 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561346054 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561351061 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561357975 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561359882 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561372042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561388969 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561414003 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561446905 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561460972 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561470985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561482906 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561503887 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561528921 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561594009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561606884 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561619043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561630011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561640024 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561640978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561654091 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561665058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561666012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561677933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561687946 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561688900 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561702013 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561712027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561716080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561743021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561749935 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561757088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561769009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561779976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561786890 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561790943 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561803102 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561810017 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561816931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561827898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561829090 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561841965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561852932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561855078 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561865091 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561876059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561883926 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561894894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561903000 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561907053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561919928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561932087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561943054 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561943054 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561954021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561954975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561968088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561974049 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561980009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.561984062 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.561997890 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562011003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562012911 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.562021017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562052011 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.562851906 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562865973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562875986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562894106 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562896967 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.562906981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562921047 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.562922001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562935114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562946081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562947989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.562958002 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562968969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562971115 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.562983036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.562990904 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.562997103 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563009977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563021898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563021898 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563034058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563045979 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563047886 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563059092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563071012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563077927 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563083887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563095093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563101053 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563107967 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563117981 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563121080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563136101 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563148022 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563155890 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563162088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563174009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563175917 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563198090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563200951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563210964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563222885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563235998 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563247919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563249111 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563260078 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563271999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563272953 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563285112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563286066 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563299894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563316107 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563319921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563334942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563338995 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563348055 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563359976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563371897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563386917 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563386917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563395977 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563404083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563416004 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563422918 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563429117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563441038 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563446999 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563452005 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563466072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563477039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563484907 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563489914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563502073 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563512087 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563513994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563527107 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563530922 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563539982 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563550949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563555002 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563564062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563575029 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563580990 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563585997 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563592911 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563600063 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563611984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563622952 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563622952 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563636065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563646078 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563648939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563664913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563676119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563687086 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563688993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563700914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563710928 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563713074 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563726902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563725948 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563739061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563745975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563752890 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563760042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563771009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563777924 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563791037 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563798904 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563803911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563817024 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563828945 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563834906 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563842058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563853025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563857079 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563872099 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563882113 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563886881 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563898087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563909054 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563910961 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563921928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563934088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563934088 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563946009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563956976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563957930 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563970089 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563982010 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.563985109 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.563993931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564004898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564007998 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564018011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564028978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564033031 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564040899 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564054012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564055920 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564065933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564074039 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564078093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564090014 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564101934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564116001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564116955 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564129114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564140081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564146042 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564152002 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564158916 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564167023 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564172983 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564179897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564192057 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564201117 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564203978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564217091 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564229012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564230919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564244032 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564254999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564264059 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564268112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564281940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564291954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564292908 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564310074 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564327955 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564332008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564341068 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564352989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564363956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564374924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564383984 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564388037 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564393044 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564400911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564414024 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564424038 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564424992 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564435959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564448118 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564460993 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564466000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564479113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564486027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564492941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564502954 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564503908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564517975 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564528942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564532042 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564543009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564555883 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564558029 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564569950 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564580917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564580917 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564593077 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564604044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564609051 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564615965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564620972 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564627886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564640045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564651012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564651966 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564665079 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564672947 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564677954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564690113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564698935 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564702988 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564722061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564722061 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564735889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564747095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564753056 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564755917 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564763069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564775944 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564779997 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564788103 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564800978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564802885 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564815044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564826965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564836979 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564837933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564851046 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564861059 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564865112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564878941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564881086 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564891100 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564903975 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564903975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564917088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564929008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564929008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564944029 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564958096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.564968109 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.564992905 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565160990 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565174103 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565185070 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565196991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565198898 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565208912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565222979 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565222979 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565241098 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565248966 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565253973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565265894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565278053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565280914 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565290928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565294981 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565310001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565321922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565324068 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565334082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565346956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565359116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565363884 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565370083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565380096 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565382957 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565397978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565408945 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565412045 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565422058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565433979 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565445900 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565453053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565466881 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565469980 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565478086 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565489054 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565489054 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565502882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565515041 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565514088 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565527916 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565538883 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565538883 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565552950 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565565109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565566063 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565577030 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565588951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565588951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565602064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565613985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565617085 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565625906 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565638065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565640926 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565651894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565663099 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565665960 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565675020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565686941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565690041 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565699100 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565710068 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565711021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565726042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565742016 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565742970 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565756083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565768003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565769911 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565782070 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565793037 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565793991 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565805912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.565820932 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.565856934 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566143036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566155910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566167116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566178083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566189051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566196918 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566200972 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566209078 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566212893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566226006 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566236973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566245079 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566257954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566273928 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566277027 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566289902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566299915 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566299915 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566313028 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566322088 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566324949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566338062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566349030 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566351891 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566363096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566366911 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566375017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566387892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566397905 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566402912 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566411018 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566422939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566422939 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566436052 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566445112 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566447973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566462040 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566473007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566483021 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566484928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566497087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566508055 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566512108 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566520929 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566525936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566538095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566546917 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566548109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566562891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566572905 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566574097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566586971 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566598892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566607952 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566611052 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566622972 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566631079 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566636086 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566643953 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566648006 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566660881 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566672087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566683054 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566695929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566706896 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566708088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566721916 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566734076 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566737890 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566746950 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566756964 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566757917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566771984 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.566772938 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.566797972 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567029953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567042112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567051888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567065001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567075968 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567076921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567090034 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567102909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567102909 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567116022 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567117929 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567127943 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567138910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567147017 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567152023 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567172050 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567173958 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567183971 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567195892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567207098 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567218065 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567229033 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567241907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567244053 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567244053 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567255020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567255974 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567270994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567281961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567293882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567305088 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567321062 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567323923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567337036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567348957 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567357063 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567361116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567373991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567377090 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567384958 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567397118 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567403078 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567408085 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567424059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567430973 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567437887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567451000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567457914 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567462921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567472935 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567476034 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567488909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567498922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567511082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567511082 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567523003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567534924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567536116 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567547083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567558050 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567564011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567574978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567586899 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567589998 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567589998 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567599058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567610979 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567619085 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567622900 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567632914 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567636967 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567650080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567670107 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567694902 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567873001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567886114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567895889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567908049 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567917109 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567919970 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567933083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567945004 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567945957 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.567958117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567969084 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567980051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.567992926 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568008900 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568025112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568037987 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568049908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568061113 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568070889 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568072081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568084955 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568095922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568099022 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568109989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568121910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568121910 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568134069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568152905 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568165064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568170071 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568170071 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568176031 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568190098 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568202019 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568207026 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568214893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568217993 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568227053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568238974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568249941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568257093 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568268061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568279982 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568290949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568290949 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568304062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568315029 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568316936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568329096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568339109 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568342924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568346977 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568360090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568372011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568377972 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568384886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568397045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568408012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568419933 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568420887 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568432093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568444014 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568449020 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568455935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568469048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568480015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568485022 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568491936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568504095 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568504095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568517923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568531036 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568552017 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568650007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568846941 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568859100 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568869114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568881989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568883896 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568893909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568906069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568907976 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568919897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568928957 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568933010 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568944931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568955898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568968058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568985939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568995953 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.568996906 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.568995953 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569010019 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569024086 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569036007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569042921 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569051027 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569057941 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569063902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569077015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569087982 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569087982 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569101095 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569112062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569123983 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569124937 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569139957 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569149017 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569152117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569165945 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569173098 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569176912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569189072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569200039 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569200993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569221020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569224119 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569233894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569243908 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569247007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569261074 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569272995 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569283962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569295883 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569303036 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569303036 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569308043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569322109 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569324970 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569334984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569344044 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569348097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569360971 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569369078 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569372892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569386005 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569399118 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569411039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569411993 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569423914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569427013 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569437981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569451094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569458961 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569462061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569480896 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569509029 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569772005 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569785118 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569796085 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569807053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569818974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569819927 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569832087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569844007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569855928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569866896 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569875002 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569875002 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569879055 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569890022 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569891930 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569905043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569920063 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569921970 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569935083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569945097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569947004 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569957972 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569969893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569972992 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569983959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.569988012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.569996119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570008039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570019007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570029974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570039988 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570041895 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570056915 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570065022 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570067883 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570080996 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570091963 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570099115 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570103884 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570132017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570142984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570152998 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570152998 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570153952 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570168018 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570180893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570182085 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570194006 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570202112 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570207119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570219994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570230961 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570241928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570246935 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570254087 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570266008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570271969 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570278883 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570291042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570291996 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570302963 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570316076 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570318937 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570327997 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570338964 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570341110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570354939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570359945 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570369959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570380926 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570384979 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570393085 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570441961 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570441961 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570493937 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570506096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570514917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570527077 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570547104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570549965 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570561886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570573092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570580959 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570584059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570597887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570609093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570611954 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570621967 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570635080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570638895 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570652962 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570667028 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570808887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570822954 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570832968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570844889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570856094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570858002 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570868969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570879936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570892096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570895910 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570904016 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570916891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570924044 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570928097 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570940018 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570941925 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570952892 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570960999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570972919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570980072 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.570983887 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.570997953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571008921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571019888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571031094 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571032047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571044922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571048021 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571057081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571068048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571074009 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571080923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571088076 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571093082 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571099043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571110964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571120024 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571122885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571135044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571136951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571146965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571156025 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571161032 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571172953 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571187019 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571188927 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571199894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571212053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571212053 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571223974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571232080 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571235895 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571249008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571257114 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571260929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571325064 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571325064 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571564913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571577072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571588993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571600914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571611881 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571616888 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571629047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571640015 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571640968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571655989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571665049 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571667910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571680069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571691990 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571695089 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571707964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571713924 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571727991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571741104 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571752071 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571758986 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571763992 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571775913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571782112 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571789980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571799994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571805000 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571811914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571825027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571825027 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571837902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571850061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571851015 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571866035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571877956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571888924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571899891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571907997 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571907997 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571919918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571930885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571940899 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571942091 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571954966 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571964025 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571968079 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571980000 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.571981907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.571995974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572005987 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572006941 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572019100 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572031021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572035074 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572042942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572053909 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572066069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572077036 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572077990 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572088957 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572101116 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572103024 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572113037 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572124004 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572124958 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572137117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572148085 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572158098 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572160959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572173119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572185993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572211027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572211027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572226048 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572506905 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572519064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572530031 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572541952 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572556973 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572571993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572583914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572597027 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572598934 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572609901 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572628021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572629929 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572639942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572649002 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572654009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572666883 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572679996 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572680950 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572694063 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572705984 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572714090 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572717905 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572730064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572742939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572751999 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572766066 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572771072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572779894 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572783947 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572797060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572808027 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572820902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572828054 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572835922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572846889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572848082 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572859049 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572870016 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572871923 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572882891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572896004 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.572906017 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.572912931 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.577068090 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.577258110 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.693099022 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694086075 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694097042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694108963 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694119930 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694135904 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694137096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694149017 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694159985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694170952 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694188118 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694200039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694211006 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694221973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694235086 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694245100 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694257021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694267988 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694288969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694303989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694303989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694303989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694303989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694303989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694303989 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694305897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694319010 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694323063 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694330931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694344044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694349051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694359064 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694360018 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694372892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694374084 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694386005 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694396973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694399118 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694408894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694416046 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694422960 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694441080 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694449902 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694457054 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694468021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694479942 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694484949 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694493055 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694504976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694509029 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694516897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694528103 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694528103 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694540977 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694552898 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694552898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694569111 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694586039 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694593906 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694600105 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694614887 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694621086 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694634914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694641113 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.694648981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.694686890 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695265055 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695278883 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695288897 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695301056 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695305109 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695324898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695332050 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695338011 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695348978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695362091 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695374012 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695379019 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695390940 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695401907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695405006 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695420027 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695426941 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695434093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695436001 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695446968 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695472956 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695517063 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695538044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695549965 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695554972 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695570946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695590973 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695619106 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695631981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695641994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695652962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695657015 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695663929 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695677996 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695679903 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695689917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695702076 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695704937 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695713043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695727110 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695739985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695741892 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695765018 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695776939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695782900 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695789099 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695823908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695827007 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695842981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695856094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695867062 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695878029 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695878983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695894003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695905924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695916891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695919037 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695926905 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695955992 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.695981979 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.695992947 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696002960 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696014881 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696028948 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696028948 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696043015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696053982 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696080923 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696168900 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696190119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696202040 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696213007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696224928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696224928 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696238995 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696249008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696250916 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696264982 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696274996 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696275949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696295023 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696310043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696316004 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696321964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696333885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696338892 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696346045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696357012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696365118 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696367979 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696381092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696388960 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696392059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696404934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696407080 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696418047 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696428061 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696428061 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696440935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696449995 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696454048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696465969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696479082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696484089 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696491957 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696502924 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696505070 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696516991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696525097 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696528912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696542025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696553946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696561098 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696566105 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696573973 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696577072 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696593046 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696602106 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696605921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696616888 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696628094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696634054 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696640015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696651936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696659088 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696662903 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696679115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696683884 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696690083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696702003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696702003 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696713924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696724892 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696726084 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696738958 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696749926 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696752071 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696764946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696775913 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696785927 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696787119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696799994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696810007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696811914 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696822882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696830988 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696835041 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696847916 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696852922 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696860075 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696871996 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696877003 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696883917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696897030 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696898937 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696908951 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696922064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696932077 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696933985 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696945906 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696955919 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696957111 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696969986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696971893 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.696981907 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696994066 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.696995974 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697010040 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697021008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697029114 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697041035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697052956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697053909 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697065115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697072983 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697082043 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697093964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697105885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697115898 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697119951 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697128057 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697139025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697139978 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697149992 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697150946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697164059 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697170973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697180033 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697180986 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697196007 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697200060 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697206974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697218895 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697220087 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697232962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697243929 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697244883 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697258949 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.697268963 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697299004 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697700977 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.697755098 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.698148012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698235989 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698246956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698259115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698271036 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.698298931 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.698328972 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698340893 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698374987 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.698724031 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698735952 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698748112 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698770046 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.698885918 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698898077 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698909044 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698920012 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698923111 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.698931932 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698944092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698945999 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.698964119 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698971987 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.698976994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698988914 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.698997021 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.698999882 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699012041 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699023008 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699023008 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699043036 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699212074 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699229956 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699242115 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699253082 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699278116 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699297905 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699310064 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699327946 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699340105 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699352026 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699352980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699366093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699377060 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699378014 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699404001 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699430943 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699443102 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699462891 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699465990 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699474096 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699486971 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699497938 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699503899 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699511051 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699527025 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699553013 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699579000 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699590921 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699600935 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699614048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699625015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699635983 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699636936 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699647903 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699657917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699661016 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699670076 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699677944 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699681997 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699692965 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699698925 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699717999 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699718952 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699738026 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699750900 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699759960 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699762106 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699774981 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699784040 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699785948 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699798107 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699809074 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699812889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699825048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699832916 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699836969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699850082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699857950 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699861050 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699878931 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699884892 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699892998 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699904919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699920893 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699923038 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699934959 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699944973 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699945927 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699956894 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699969053 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699969053 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.699980021 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.699990988 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700001001 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700005054 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700015068 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700031996 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700031996 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700043917 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700051069 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700062990 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700067043 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700084925 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700103045 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700108051 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700115919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700126886 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700134993 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700138092 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700150967 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700160027 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700161934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700174093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700186014 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700187922 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700200081 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700210094 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700222015 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700225115 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700233936 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700248957 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700254917 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700270891 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700273991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700288057 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700293064 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700299978 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700320959 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700354099 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700366020 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700376987 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700390100 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700391054 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700412035 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700416088 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700424910 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700434923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700447083 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700459003 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700469971 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700476885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700483084 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700489998 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700501919 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700510025 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700516939 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700534105 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700534105 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700547934 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700556040 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700558901 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700577974 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700582981 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700592041 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700603962 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700613976 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700618029 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700628042 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700639009 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700639009 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700651884 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700663090 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700664997 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700675964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700687885 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700700045 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700710058 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700721025 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700723886 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700731993 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700745106 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700748920 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700757980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700771093 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700771093 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700783014 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700788975 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700795889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700808048 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700819969 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700833082 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700836897 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700850964 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700864077 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700865030 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700875044 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700881958 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700894117 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700901985 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700906038 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700920105 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700930119 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700932980 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700944901 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700957060 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700967073 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700969934 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.700978994 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700990915 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.700994968 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.701004028 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701015949 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.701019049 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701028109 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.701031923 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701045990 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701057911 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701061964 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.701071024 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701081991 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701086998 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.701093912 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701106071 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.701107979 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701122046 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701133966 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701144934 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.701148033 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701160908 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701169014 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.701175928 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.701188087 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.701214075 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.702379942 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.853288889 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:01.853387117 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.853435040 CET	49704	80	192.168.2.5	131.188.40.189
Nov 3, 2024 09:35:01.858897924 CET	80	49704	131.188.40.189	192.168.2.5
Nov 3, 2024 09:35:02.323519945 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:02.328840971 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:02.328968048 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:02.329180956 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:02.334008932 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:03.214339018 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:03.221576929 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:03.226497889 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:03.440184116 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:03.445341110 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:03.450233936 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:03.668196917 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:03.668257952 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:03.668315887 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:03.668483019 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:03.669011116 CET	49706	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:03.673289061 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:03.673775911 CET	80	49706	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:03.673893929 CET	49706	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:03.673938036 CET	49706	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:03.678925037 CET	80	49706	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:04.723742008 CET	80	49706	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:04.723891020 CET	80	49706	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:04.723901987 CET	80	49706	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:04.723984957 CET	49706	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:04.872901917 CET	80	49706	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:04.872981071 CET	49706	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:04.873048067 CET	49706	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:04.873527050 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:04.877912045 CET	80	49706	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:04.878334999 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:05.099054098 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:05.100744963 CET	49707	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:05.105623960 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.105750084 CET	49707	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:05.105843067 CET	49707	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:05.110711098 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.145436049 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:05.866151094 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.866173983 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.866187096 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.866198063 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.866209984 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.866223097 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.866234064 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.866245031 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.866257906 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.866270065 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.866308928 CET	49707	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:05.866470098 CET	49707	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:05.873269081 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.873289108 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.873383045 CET	49707	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:05.878226995 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.878391027 CET	49707	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:05.878391027 CET	49707	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:05.878773928 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:05.881325960 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:05.881987095 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:05.883311033 CET	80	49707	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:05.883868933 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:05.887039900 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:05.887109041 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:05.887120962 CET	42901	49705	96.244.38.131	192.168.2.5
Nov 3, 2024 09:35:05.887178898 CET	49705	42901	192.168.2.5	96.244.38.131
Nov 3, 2024 09:35:05.887319088 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:05.892158031 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:06.793462038 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:06.799490929 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:06.804502010 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:07.029956102 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:07.041188002 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:07.046169996 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:07.264744997 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:07.264764071 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:07.264817953 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:07.264928102 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:07.265466928 CET	49709	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:07.269710064 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:07.270266056 CET	80	49709	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:07.270334005 CET	49709	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:07.270397902 CET	49709	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:07.275276899 CET	80	49709	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:08.330945969 CET	80	49709	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:08.330969095 CET	80	49709	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:08.330980062 CET	80	49709	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:08.331213951 CET	49709	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:08.477344990 CET	80	49709	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:08.477454901 CET	49709	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:08.477555990 CET	49709	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:08.477874041 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:08.482420921 CET	80	49709	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:08.482721090 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:08.705154896 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:08.706594944 CET	49710	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:08.711601973 CET	80	49710	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:08.711783886 CET	49710	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:08.711783886 CET	49710	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:08.716831923 CET	80	49710	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:08.754920006 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:09.757292032 CET	80	49710	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:09.757397890 CET	49710	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:09.760791063 CET	49710	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:09.764471054 CET	49711	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:09.765655041 CET	80	49710	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:09.769392014 CET	80	49711	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:09.769448996 CET	49711	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:09.770296097 CET	49711	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:09.775125980 CET	80	49711	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:10.536562920 CET	80	49711	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:10.536593914 CET	80	49711	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:10.536611080 CET	80	49711	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:10.536623955 CET	80	49711	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:10.536633968 CET	80	49711	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:10.536636114 CET	49711	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:10.536649942 CET	80	49711	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:10.536679983 CET	49711	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:10.536710024 CET	49711	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:10.536787987 CET	80	49711	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:10.536838055 CET	49711	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:10.536871910 CET	49711	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:10.537249088 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:10.537681103 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:10.538356066 CET	49712	9000	192.168.2.5	154.213.184.111
Nov 3, 2024 09:35:10.541630030 CET	80	49711	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:10.542068958 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:10.542834044 CET	9001	49708	144.217.4.166	192.168.2.5
Nov 3, 2024 09:35:10.542889118 CET	49708	9001	192.168.2.5	144.217.4.166
Nov 3, 2024 09:35:10.543138027 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:10.543217897 CET	49712	9000	192.168.2.5	154.213.184.111
Nov 3, 2024 09:35:10.543421984 CET	49712	9000	192.168.2.5	154.213.184.111
Nov 3, 2024 09:35:10.548163891 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:11.600680113 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:11.603291035 CET	49712	9000	192.168.2.5	154.213.184.111
Nov 3, 2024 09:35:11.608216047 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:11.910406113 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:11.910928965 CET	49712	9000	192.168.2.5	154.213.184.111
Nov 3, 2024 09:35:11.915790081 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:12.217803001 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:12.217823029 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:12.217909098 CET	49712	9000	192.168.2.5	154.213.184.111
Nov 3, 2024 09:35:12.255366087 CET	49712	9000	192.168.2.5	154.213.184.111
Nov 3, 2024 09:35:12.256057978 CET	49713	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:12.260237932 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:12.260901928 CET	80	49713	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:12.260974884 CET	49713	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:12.261082888 CET	49713	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:12.265830040 CET	80	49713	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:13.320080996 CET	80	49713	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:13.320177078 CET	49713	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:13.320225000 CET	49713	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:13.320758104 CET	49714	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:13.325361967 CET	80	49713	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:13.325742006 CET	80	49714	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:13.325867891 CET	49714	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:13.325973988 CET	49714	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:13.331332922 CET	80	49714	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:13.355720997 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:13.360691071 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:13.360770941 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:13.360939026 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:13.366400003 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:14.083070040 CET	80	49714	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:14.083087921 CET	80	49714	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:14.083162069 CET	80	49714	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:14.083188057 CET	49714	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:14.091399908 CET	80	49714	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:14.091527939 CET	49714	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:14.091527939 CET	49714	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:14.091909885 CET	49712	9000	192.168.2.5	154.213.184.111
Nov 3, 2024 09:35:14.096592903 CET	80	49714	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:14.096678972 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:14.398616076 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:14.400623083 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:14.401226997 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:14.401865005 CET	49712	9000	192.168.2.5	154.213.184.111
Nov 3, 2024 09:35:14.402142048 CET	49712	9000	192.168.2.5	154.213.184.111
Nov 3, 2024 09:35:14.406296968 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:14.406765938 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:14.407284021 CET	9000	49712	154.213.184.111	192.168.2.5
Nov 3, 2024 09:35:14.407336950 CET	49712	9000	192.168.2.5	154.213.184.111
Nov 3, 2024 09:35:14.505844116 CET	49716	443	192.168.2.5	23.129.64.217
Nov 3, 2024 09:35:14.505893946 CET	443	49716	23.129.64.217	192.168.2.5
Nov 3, 2024 09:35:14.506031036 CET	49716	443	192.168.2.5	23.129.64.217
Nov 3, 2024 09:35:14.506184101 CET	49716	443	192.168.2.5	23.129.64.217
Nov 3, 2024 09:35:14.506195068 CET	443	49716	23.129.64.217	192.168.2.5
Nov 3, 2024 09:35:14.728877068 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:14.752568960 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:14.757528067 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:15.050009966 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:15.050025940 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:15.050137043 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:15.059252024 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:15.066001892 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:15.067215919 CET	49717	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:15.073884010 CET	80	49717	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:15.073957920 CET	49717	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:15.074098110 CET	49717	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:15.080938101 CET	80	49717	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:15.513428926 CET	443	49716	23.129.64.217	192.168.2.5
Nov 3, 2024 09:35:15.513549089 CET	49716	443	192.168.2.5	23.129.64.217
Nov 3, 2024 09:35:15.516022921 CET	49716	443	192.168.2.5	23.129.64.217
Nov 3, 2024 09:35:15.516036034 CET	443	49716	23.129.64.217	192.168.2.5
Nov 3, 2024 09:35:15.516279936 CET	443	49716	23.129.64.217	192.168.2.5
Nov 3, 2024 09:35:15.516612053 CET	49716	443	192.168.2.5	23.129.64.217
Nov 3, 2024 09:35:15.559334993 CET	443	49716	23.129.64.217	192.168.2.5
Nov 3, 2024 09:35:16.124028921 CET	80	49717	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:16.124097109 CET	49717	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:16.124155998 CET	49717	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:16.124957085 CET	49719	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:16.129188061 CET	80	49717	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:16.129873037 CET	80	49719	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:16.129940987 CET	49719	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:16.130069017 CET	49719	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:16.134884119 CET	80	49719	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:17.199763060 CET	80	49719	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:17.199827909 CET	49719	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:17.199887037 CET	49719	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:17.200412035 CET	49722	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:17.204713106 CET	80	49719	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:17.205238104 CET	80	49722	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:17.205384016 CET	49722	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:17.205482960 CET	49722	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:17.210329056 CET	80	49722	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:18.244585991 CET	80	49722	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:18.244601965 CET	80	49722	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:18.244611979 CET	80	49722	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:18.244653940 CET	49722	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:18.286065102 CET	49722	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:18.393577099 CET	80	49722	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:18.393667936 CET	49722	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:18.393729925 CET	49722	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:18.394121885 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:18.399538994 CET	80	49722	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:18.400002956 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:18.694108963 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:18.695674896 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:18.700537920 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:18.700753927 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:18.700902939 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:18.705676079 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:18.739212036 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:19.752794981 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:19.752954960 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:19.759788036 CET	49725	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:19.764746904 CET	80	49725	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:19.781399012 CET	49727	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:19.786264896 CET	80	49727	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:19.786345959 CET	49727	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:19.786501884 CET	49727	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:19.791343927 CET	80	49727	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:20.546335936 CET	80	49727	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:20.546358109 CET	80	49727	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:20.546370983 CET	80	49727	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:20.546381950 CET	80	49727	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:20.546394110 CET	80	49727	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:20.546406031 CET	80	49727	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:20.546416998 CET	80	49727	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:20.546423912 CET	49727	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:20.546452999 CET	49727	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:20.555885077 CET	80	49727	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:20.555958033 CET	49727	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:20.556014061 CET	49727	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:20.560990095 CET	80	49727	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:20.565587044 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:20.570796967 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:20.976099968 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:20.977509022 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:20.982491970 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:21.385941982 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:21.386344910 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:21.391366959 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:21.668009996 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:21.672935009 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:21.673052073 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:21.673250914 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:21.678045988 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:21.684526920 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:21.685708046 CET	49740	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:21.690716028 CET	80	49740	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:21.690784931 CET	49740	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:21.690850973 CET	49740	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:21.695785046 CET	80	49740	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:21.739185095 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:22.717560053 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:22.721282959 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:22.726402998 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:22.741528034 CET	80	49740	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:22.741630077 CET	49740	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:22.741719961 CET	49740	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:22.742290020 CET	49746	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:22.746540070 CET	80	49740	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:22.747190952 CET	80	49746	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:22.747275114 CET	49746	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:22.747339010 CET	49746	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:22.752125025 CET	80	49746	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:23.024370909 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:23.027040005 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:23.033818960 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:23.332175016 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:23.332194090 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:23.332276106 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:23.332428932 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:23.333070993 CET	49747	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:23.337239981 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:23.337884903 CET	80	49747	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:23.337981939 CET	49747	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:23.338165998 CET	49747	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:23.342982054 CET	80	49747	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:23.803386927 CET	80	49746	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:23.803464890 CET	49746	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:23.803493977 CET	49746	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:23.803931952 CET	49753	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:23.808443069 CET	80	49746	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:23.808816910 CET	80	49753	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:23.808887959 CET	49753	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:23.808962107 CET	49753	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:23.813822985 CET	80	49753	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:24.381685972 CET	80	49747	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:24.381724119 CET	80	49747	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:24.381736994 CET	80	49747	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:24.381757021 CET	80	49747	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:24.381768942 CET	49747	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:24.381813049 CET	49747	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:24.531321049 CET	80	49747	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:24.531603098 CET	49747	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:24.531603098 CET	49747	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:24.531991959 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:24.536524057 CET	80	49747	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:24.536859035 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:24.834235907 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:24.835653067 CET	49758	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:24.840605974 CET	80	49758	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:24.840671062 CET	49758	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:24.840737104 CET	49758	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:24.845562935 CET	80	49758	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:24.867657900 CET	80	49753	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:24.867825031 CET	49753	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:24.867886066 CET	49753	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:24.868002892 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:24.872910976 CET	80	49753	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:24.872925043 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:24.873003960 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:24.878004074 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:24.879864931 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:25.170548916 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:25.171969891 CET	49760	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:25.176979065 CET	80	49760	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:25.177079916 CET	49760	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:25.177133083 CET	49760	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:25.181996107 CET	80	49760	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:25.223615885 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:25.619549990 CET	80	49758	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:25.619565964 CET	80	49758	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:25.619577885 CET	80	49758	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:25.619612932 CET	49758	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:25.629947901 CET	80	49758	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:25.630021095 CET	49758	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:25.630048990 CET	49758	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:25.630429983 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:25.634901047 CET	80	49758	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:25.635251999 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:25.953203917 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:25.954087019 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:25.958940983 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:26.230483055 CET	80	49760	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:26.230554104 CET	49760	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:26.230613947 CET	49760	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:26.231167078 CET	49766	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:26.235405922 CET	80	49760	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:26.235909939 CET	80	49766	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:26.235961914 CET	49766	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:26.236011028 CET	49766	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:26.241070986 CET	80	49766	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:26.271840096 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:26.272231102 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:26.277154922 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:26.574630022 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:26.575881958 CET	49767	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:26.580888987 CET	80	49767	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:26.581048012 CET	49767	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:26.581048012 CET	49767	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:26.586052895 CET	80	49767	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:26.614322901 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:27.004302979 CET	80	49766	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:27.004323006 CET	80	49766	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:27.004334927 CET	80	49766	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:27.004374027 CET	49766	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:27.013233900 CET	80	49766	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:27.013278961 CET	49766	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:27.013324976 CET	49766	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:27.013703108 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:27.018172979 CET	80	49766	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:27.018656015 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:27.447346926 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:27.453095913 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:27.458014011 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:27.640989065 CET	80	49767	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:27.641087055 CET	49767	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:27.641144037 CET	49767	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:27.641659975 CET	49773	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:27.646213055 CET	80	49767	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:27.646466017 CET	80	49773	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:27.646557093 CET	49773	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:27.646631002 CET	49773	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:27.651408911 CET	80	49773	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:27.955173016 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:27.955420017 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:27.960390091 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:28.697849035 CET	80	49773	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:28.698081017 CET	49773	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:28.698081017 CET	49773	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:28.698543072 CET	49779	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:28.703078985 CET	80	49773	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:28.703444004 CET	80	49779	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:28.703527927 CET	49779	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:28.703587055 CET	49779	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:28.708477974 CET	80	49779	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:29.761580944 CET	80	49779	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:29.761600971 CET	80	49779	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:29.761611938 CET	80	49779	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:29.761626005 CET	80	49779	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:29.761826992 CET	49779	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:29.761826992 CET	49779	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:29.914638042 CET	80	49779	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:29.914840937 CET	49779	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:29.914840937 CET	49779	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:29.915262938 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:29.919830084 CET	80	49779	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:29.920136929 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:30.092219114 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:30.145446062 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:30.231961966 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:30.232158899 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:30.237085104 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:30.237143993 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:30.242055893 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:30.540440083 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:30.544070959 CET	49790	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:30.549031019 CET	80	49790	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:30.551052094 CET	49790	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:30.551116943 CET	49790	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:30.556051970 CET	80	49790	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:30.583233118 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:31.097507954 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:31.136004925 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:31.140914917 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:31.582281113 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:31.587234974 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:31.592303991 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:31.601826906 CET	80	49790	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:31.601900101 CET	49790	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:31.602195978 CET	49790	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:31.603072882 CET	49796	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:31.607594967 CET	80	49790	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:31.607903004 CET	80	49796	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:31.607968092 CET	49796	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:31.609276056 CET	49796	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:31.614362955 CET	80	49796	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:32.034089088 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:32.082962036 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:32.182527065 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:32.182785034 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:32.188730001 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:32.189954996 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:32.195004940 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:32.493952990 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:32.495110035 CET	49797	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:32.499978065 CET	80	49797	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:32.500082016 CET	49797	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:32.500116110 CET	49797	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:32.505095959 CET	80	49797	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:32.536086082 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:32.642194986 CET	80	49796	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:32.643310070 CET	49796	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:32.643414021 CET	49796	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:32.643919945 CET	49803	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:32.648689032 CET	80	49796	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:32.648946047 CET	80	49803	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:32.649023056 CET	49803	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:32.649072886 CET	49803	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:32.655777931 CET	80	49803	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:33.536012888 CET	80	49797	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:33.536334991 CET	49797	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:33.536561012 CET	49797	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:33.537152052 CET	49804	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:33.541884899 CET	80	49797	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:33.542467117 CET	80	49804	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:33.542536974 CET	49804	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:33.542656898 CET	49804	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:33.547847986 CET	80	49804	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:33.685583115 CET	80	49803	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:33.685610056 CET	80	49803	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:33.685620070 CET	80	49803	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:33.685655117 CET	49803	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:33.739204884 CET	49803	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:33.831697941 CET	80	49803	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:33.831799030 CET	49803	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:33.831856012 CET	49803	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:33.832304001 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:33.836726904 CET	80	49803	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:33.837064981 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:34.174001932 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:34.175076008 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:34.179964066 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:34.487184048 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:34.487481117 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:34.492274046 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:34.622925043 CET	80	49804	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:34.623016119 CET	49804	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:34.623083115 CET	49804	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:34.623620033 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:34.627943993 CET	80	49804	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:34.628540039 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:34.628619909 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:34.628664970 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:34.633654118 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:34.853667021 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:34.853908062 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:34.858781099 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:34.858849049 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:34.863729954 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:35.157107115 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:35.158160925 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:35.163187981 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:35.163259983 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:35.163388968 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:35.168335915 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:35.208036900 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:35.398263931 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:35.398344040 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:35.398377895 CET	49810	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:35.398468018 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:35.403270006 CET	80	49810	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:35.403285980 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:35.403347969 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:35.408240080 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:35.707947969 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:35.708982944 CET	49817	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:35.713898897 CET	80	49817	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:35.713965893 CET	49817	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:35.714035988 CET	49817	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:35.718944073 CET	80	49817	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:35.754823923 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:36.224703074 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.224719048 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.224730968 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.224754095 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.224770069 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.224781990 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.224786043 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:36.224797010 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.224808931 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.224821091 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.224833965 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.224982977 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:36.224982977 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:36.224982977 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:36.229643106 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.229732037 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.229778051 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:36.378979921 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.379000902 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.379014015 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.379021883 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.379117012 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:36.379162073 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.379175901 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.379225016 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:36.486485958 CET	80	49817	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:36.486588001 CET	49817	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:36.486629009 CET	49817	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:36.487157106 CET	49823	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:36.491538048 CET	80	49817	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:36.492048979 CET	80	49823	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:36.492116928 CET	49823	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:36.495145082 CET	49823	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:36.500092983 CET	80	49823	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:36.687582016 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.687681913 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:36.688338995 CET	49816	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:36.688837051 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:36.693218946 CET	80	49816	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:36.693846941 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:37.430393934 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:37.431153059 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:37.436115980 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:37.551850080 CET	80	49823	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:37.551940918 CET	49823	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:37.551999092 CET	49823	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:37.552448988 CET	49829	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:37.556870937 CET	80	49823	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:37.557251930 CET	80	49829	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:37.557327032 CET	49829	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:37.557403088 CET	49829	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:37.562203884 CET	80	49829	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:37.800303936 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:37.800580025 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:37.805541992 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:38.146266937 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:38.146491051 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:38.151262999 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:38.151335001 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:38.156085014 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:38.454722881 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:38.455852985 CET	49835	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:38.460817099 CET	80	49835	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:38.460995913 CET	49835	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:38.461122990 CET	49835	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:38.465960979 CET	80	49835	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:38.504890919 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:38.615180969 CET	80	49829	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:38.615283966 CET	49829	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:38.615324020 CET	49829	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:38.615411997 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:38.620220900 CET	80	49829	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:38.620331049 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:38.620387077 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:38.625416040 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:38.923305035 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:38.924467087 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:38.929395914 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:38.929462910 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:38.929541111 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:38.935094118 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:38.973694086 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:39.520863056 CET	80	49835	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:39.520939112 CET	49835	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:39.521363020 CET	49835	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:39.525042057 CET	49842	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:39.526171923 CET	80	49835	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:39.529897928 CET	80	49842	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:39.529963017 CET	49842	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:39.531824112 CET	49842	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:39.536781073 CET	80	49842	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:39.696154118 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.696170092 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.696186066 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.696197033 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.696207047 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.696218014 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.696223021 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:39.696235895 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.696247101 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.696259975 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.696261883 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:39.696269035 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.696274996 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:39.696307898 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:39.701356888 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.701368093 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.701378107 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.701426029 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:39.842983007 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.843012094 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.843029976 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.843044043 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.843055964 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.843075037 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.843086958 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:39.843132019 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:39.843518972 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.843576908 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:39.843616962 CET	49836	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:39.844121933 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:39.848400116 CET	80	49836	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:39.848984003 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:40.591430902 CET	80	49842	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:40.591516972 CET	49842	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:40.591687918 CET	49842	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:40.592102051 CET	49848	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:40.596489906 CET	80	49842	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:40.596952915 CET	80	49848	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:40.597023964 CET	49848	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:40.597120047 CET	49848	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:40.601891994 CET	80	49848	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:41.395509005 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:41.396121979 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:41.400947094 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:41.654450893 CET	80	49848	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:41.654624939 CET	49848	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:41.654624939 CET	49848	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:41.654715061 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:41.659528971 CET	80	49848	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:41.659539938 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:41.659615040 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:41.664493084 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:41.916692972 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:41.916932106 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:41.921947002 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:42.072772980 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:42.073805094 CET	49854	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:42.078816891 CET	80	49854	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:42.078880072 CET	49854	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:42.078979969 CET	49854	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:42.083946943 CET	80	49854	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:42.114238977 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:42.287452936 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:42.287782907 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:42.292735100 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:42.292800903 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:42.297715902 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:42.595161915 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:42.596414089 CET	49860	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:42.601552010 CET	80	49860	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:42.601644039 CET	49860	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:42.601691008 CET	49860	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:42.606681108 CET	80	49860	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:42.645700932 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:42.839741945 CET	80	49854	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:42.839833975 CET	49854	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:42.839896917 CET	49854	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:42.840486050 CET	49861	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:42.844711065 CET	80	49854	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:42.845650911 CET	80	49861	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:42.845726013 CET	49861	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:42.845777988 CET	49861	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:42.850666046 CET	80	49861	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:43.374299049 CET	80	49860	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:43.374376059 CET	49860	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:43.374418020 CET	49860	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:43.374908924 CET	49862	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:43.379512072 CET	80	49860	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:43.379868031 CET	80	49862	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:43.379939079 CET	49862	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:43.379980087 CET	49862	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:43.385082960 CET	80	49862	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:43.608153105 CET	80	49861	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:43.608941078 CET	49861	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:43.609675884 CET	49861	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:43.610200882 CET	49866	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:43.614511013 CET	80	49861	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:43.615086079 CET	80	49866	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:43.615186930 CET	49866	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:43.615288019 CET	49866	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:43.620145082 CET	80	49866	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:44.436773062 CET	80	49862	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:44.436837912 CET	49862	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:44.436886072 CET	49862	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:44.437330961 CET	49869	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:44.441737890 CET	80	49862	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:44.442164898 CET	80	49869	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:44.442234039 CET	49869	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:44.442387104 CET	49869	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:44.447416067 CET	80	49869	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:44.662004948 CET	80	49866	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:44.662085056 CET	49866	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:44.662121058 CET	49866	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:44.662194967 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:44.662436008 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:44.666929960 CET	80	49866	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:44.666949987 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:44.667207956 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:44.667582035 CET	9001	49715	185.141.56.27	192.168.2.5
Nov 3, 2024 09:35:44.667634010 CET	49715	9001	192.168.2.5	185.141.56.27
Nov 3, 2024 09:35:44.771148920 CET	49874	443	192.168.2.5	209.127.116.162
Nov 3, 2024 09:35:44.771183014 CET	443	49874	209.127.116.162	192.168.2.5
Nov 3, 2024 09:35:44.771248102 CET	49874	443	192.168.2.5	209.127.116.162
Nov 3, 2024 09:35:44.771397114 CET	49874	443	192.168.2.5	209.127.116.162
Nov 3, 2024 09:35:44.771411896 CET	443	49874	209.127.116.162	192.168.2.5
Nov 3, 2024 09:35:45.484086037 CET	80	49869	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:45.484150887 CET	49869	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:45.484184980 CET	49869	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:45.484276056 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:45.489202023 CET	80	49869	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:45.489214897 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:45.489273071 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:45.494209051 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:45.506294012 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:45.511249065 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:45.511322975 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:45.511496067 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:45.516266108 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:45.796989918 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:45.797956944 CET	58365	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:45.803461075 CET	80	58365	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:45.803536892 CET	58365	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:45.803585052 CET	58365	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:45.808984041 CET	80	58365	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:45.848576069 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:45.884176970 CET	443	49874	209.127.116.162	192.168.2.5
Nov 3, 2024 09:35:45.884331942 CET	49874	443	192.168.2.5	209.127.116.162
Nov 3, 2024 09:35:45.886224031 CET	49874	443	192.168.2.5	209.127.116.162
Nov 3, 2024 09:35:45.886245012 CET	443	49874	209.127.116.162	192.168.2.5
Nov 3, 2024 09:35:45.886492968 CET	443	49874	209.127.116.162	192.168.2.5
Nov 3, 2024 09:35:45.886935949 CET	49874	443	192.168.2.5	209.127.116.162
Nov 3, 2024 09:35:45.931369066 CET	443	49874	209.127.116.162	192.168.2.5
Nov 3, 2024 09:35:46.703347921 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:46.710181952 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:46.714991093 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:46.871419907 CET	80	58365	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:46.871469021 CET	80	58365	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:46.871540070 CET	58365	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:47.021249056 CET	80	58365	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:47.024995089 CET	58365	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:47.025049925 CET	58365	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:47.029829025 CET	80	58365	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:47.032103062 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:47.037015915 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:47.075675964 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:47.076105118 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:47.081041098 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:47.371639967 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:47.371669054 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:47.371752977 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:47.372740984 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:47.375397921 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:47.376225948 CET	58374	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:47.376539946 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:47.380295992 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:47.381092072 CET	80	58374	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:47.381155968 CET	58374	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:47.381236076 CET	58374	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:47.381304026 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:47.386337042 CET	80	58374	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:47.718173981 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:47.718743086 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:47.723557949 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:48.060672998 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:48.114204884 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:48.209347963 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:48.209542990 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:48.209811926 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:48.220792055 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:48.220803022 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:48.222208977 CET	8443	49739	140.78.100.19	192.168.2.5
Nov 3, 2024 09:35:48.222264051 CET	49739	8443	192.168.2.5	140.78.100.19
Nov 3, 2024 09:35:48.318344116 CET	58380	9700	192.168.2.5	45.141.215.21
Nov 3, 2024 09:35:48.323303938 CET	9700	58380	45.141.215.21	192.168.2.5
Nov 3, 2024 09:35:48.323440075 CET	58380	9700	192.168.2.5	45.141.215.21
Nov 3, 2024 09:35:48.323592901 CET	58380	9700	192.168.2.5	45.141.215.21
Nov 3, 2024 09:35:48.328617096 CET	9700	58380	45.141.215.21	192.168.2.5
Nov 3, 2024 09:35:48.439099073 CET	80	58374	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:48.439178944 CET	58374	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:48.439238071 CET	58374	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:48.439712048 CET	58381	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:48.444622993 CET	80	58374	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:48.444634914 CET	80	58381	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:48.444722891 CET	58381	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:48.444783926 CET	58381	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:48.449698925 CET	80	58381	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:49.452361107 CET	9700	58380	45.141.215.21	192.168.2.5
Nov 3, 2024 09:35:49.453839064 CET	58380	9700	192.168.2.5	45.141.215.21
Nov 3, 2024 09:35:49.459213018 CET	9700	58380	45.141.215.21	192.168.2.5
Nov 3, 2024 09:35:49.487246990 CET	80	58381	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:49.487277985 CET	80	58381	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:49.487288952 CET	80	58381	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:49.487380981 CET	58381	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:49.633575916 CET	80	58381	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:49.633656979 CET	58381	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:49.633708000 CET	58381	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:49.634049892 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:49.638667107 CET	80	58381	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:49.638839960 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:49.788362026 CET	9700	58380	45.141.215.21	192.168.2.5
Nov 3, 2024 09:35:49.788799047 CET	58380	9700	192.168.2.5	45.141.215.21
Nov 3, 2024 09:35:49.793710947 CET	9700	58380	45.141.215.21	192.168.2.5
Nov 3, 2024 09:35:50.044384956 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:50.045644045 CET	58387	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:50.050476074 CET	80	58387	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:50.050561905 CET	58387	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:50.050625086 CET	58387	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:50.055427074 CET	80	58387	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:50.098577023 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:50.126218081 CET	9700	58380	45.141.215.21	192.168.2.5
Nov 3, 2024 09:35:50.126234055 CET	9700	58380	45.141.215.21	192.168.2.5
Nov 3, 2024 09:35:50.126282930 CET	58380	9700	192.168.2.5	45.141.215.21
Nov 3, 2024 09:35:50.126382113 CET	58380	9700	192.168.2.5	45.141.215.21
Nov 3, 2024 09:35:50.126816988 CET	58391	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:50.131151915 CET	9700	58380	45.141.215.21	192.168.2.5
Nov 3, 2024 09:35:50.131700993 CET	80	58391	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:50.131757975 CET	58391	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:50.131846905 CET	58391	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:50.136727095 CET	80	58391	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:51.112792969 CET	80	58387	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:51.112917900 CET	58387	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:51.113008976 CET	58387	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:51.113508940 CET	58394	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:51.117774010 CET	80	58387	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:51.118411064 CET	80	58394	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:51.118509054 CET	58394	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:51.118591070 CET	58394	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:51.123414040 CET	80	58394	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:51.188519001 CET	80	58391	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:51.188622952 CET	58391	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:51.188659906 CET	58391	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:51.189114094 CET	58397	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:51.193507910 CET	80	58391	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:51.194000959 CET	80	58397	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:51.194075108 CET	58397	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:51.194163084 CET	58397	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:51.199035883 CET	80	58397	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:52.158814907 CET	80	58394	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:52.158843040 CET	80	58394	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:52.158853054 CET	80	58394	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:52.158951998 CET	58394	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:52.243611097 CET	80	58397	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:52.243683100 CET	58397	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:52.243872881 CET	58397	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:52.244595051 CET	58401	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:52.248657942 CET	80	58397	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:52.249397993 CET	80	58401	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:52.249458075 CET	58401	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:52.249631882 CET	58401	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:52.254411936 CET	80	58401	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:52.303952932 CET	80	58394	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:52.304020882 CET	58394	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:52.304090977 CET	58394	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:52.304455042 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:52.308878899 CET	80	58394	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:52.309376001 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:52.799529076 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:52.800406933 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:52.805347919 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:53.012124062 CET	80	58401	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:53.012228012 CET	58401	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:53.012296915 CET	58401	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:53.012876034 CET	58380	9700	192.168.2.5	45.141.215.21
Nov 3, 2024 09:35:53.012904882 CET	58380	9700	192.168.2.5	45.141.215.21
Nov 3, 2024 09:35:53.013442993 CET	58407	443	192.168.2.5	194.87.252.100
Nov 3, 2024 09:35:53.013474941 CET	443	58407	194.87.252.100	192.168.2.5
Nov 3, 2024 09:35:53.013556004 CET	58407	443	192.168.2.5	194.87.252.100
Nov 3, 2024 09:35:53.013672113 CET	58407	443	192.168.2.5	194.87.252.100
Nov 3, 2024 09:35:53.013686895 CET	443	58407	194.87.252.100	192.168.2.5
Nov 3, 2024 09:35:53.017086029 CET	80	58401	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:53.017771006 CET	9700	58380	45.141.215.21	192.168.2.5
Nov 3, 2024 09:35:53.018177986 CET	9700	58380	45.141.215.21	192.168.2.5
Nov 3, 2024 09:35:53.018229961 CET	58380	9700	192.168.2.5	45.141.215.21
Nov 3, 2024 09:35:53.537892103 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:53.538324118 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:53.543268919 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:53.976376057 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:53.984524012 CET	58413	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:53.989434004 CET	80	58413	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:53.989506960 CET	58413	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:53.989592075 CET	58413	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:53.994364977 CET	80	58413	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:54.020459890 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:54.583978891 CET	443	58407	194.87.252.100	192.168.2.5
Nov 3, 2024 09:35:54.584041119 CET	58407	443	192.168.2.5	194.87.252.100
Nov 3, 2024 09:35:54.585720062 CET	58407	443	192.168.2.5	194.87.252.100
Nov 3, 2024 09:35:54.585726023 CET	443	58407	194.87.252.100	192.168.2.5
Nov 3, 2024 09:35:54.585994005 CET	443	58407	194.87.252.100	192.168.2.5
Nov 3, 2024 09:35:54.586313963 CET	58407	443	192.168.2.5	194.87.252.100
Nov 3, 2024 09:35:54.627341032 CET	443	58407	194.87.252.100	192.168.2.5
Nov 3, 2024 09:35:55.052206039 CET	80	58413	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:55.052292109 CET	58413	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:55.052333117 CET	58413	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:35:55.052881956 CET	58419	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:55.057331085 CET	80	58413	193.23.244.244	192.168.2.5
Nov 3, 2024 09:35:55.057780981 CET	80	58419	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:55.057867050 CET	58419	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:55.057925940 CET	58419	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:55.062835932 CET	80	58419	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:55.823748112 CET	80	58419	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:55.823816061 CET	58419	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:55.823879004 CET	58419	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:55.824347973 CET	58425	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:55.828656912 CET	80	58419	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:55.829207897 CET	80	58425	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:55.829269886 CET	58425	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:55.829320908 CET	58425	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:55.834064007 CET	80	58425	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:56.882249117 CET	80	58425	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:56.882263899 CET	80	58425	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:56.882271051 CET	80	58425	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:56.882282972 CET	80	58425	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:56.882349968 CET	58425	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:56.882376909 CET	80	58425	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:56.882388115 CET	58425	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:56.882422924 CET	58425	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:56.882466078 CET	58425	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:35:56.882823944 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:56.887233019 CET	80	58425	45.66.35.11	192.168.2.5
Nov 3, 2024 09:35:56.887595892 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:57.461086035 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:57.461714029 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:57.466520071 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:57.919084072 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:57.919579983 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:57.924438953 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:58.434638023 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:58.489212990 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:58.575678110 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:58.576025963 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:58.580897093 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:58.580957890 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:58.585913897 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:58.950819969 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:35:58.951864958 CET	58439	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:58.956789970 CET	80	58439	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:58.956881046 CET	58439	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:58.956968069 CET	58439	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:58.961714983 CET	80	58439	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:59.004877090 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:35:59.718592882 CET	80	58439	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:59.718741894 CET	58439	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:59.718786955 CET	58439	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:59.719366074 CET	58442	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:59.723896027 CET	80	58439	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:59.724309921 CET	80	58442	216.218.219.41	192.168.2.5
Nov 3, 2024 09:35:59.724402905 CET	58442	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:59.724456072 CET	58442	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:35:59.729446888 CET	80	58442	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:00.485651016 CET	80	58442	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:00.485806942 CET	58442	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:00.485840082 CET	58442	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:00.486474991 CET	58448	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:00.490734100 CET	80	58442	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:00.491358995 CET	80	58448	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:00.491489887 CET	58448	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:00.491580963 CET	58448	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:00.496782064 CET	80	58448	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:01.259726048 CET	80	58448	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:01.259834051 CET	58448	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:01.259890079 CET	58448	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:01.259973049 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:01.264926910 CET	80	58448	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:01.264940977 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:01.264997959 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:01.270009041 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:01.660326958 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:01.661420107 CET	58454	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:01.666249990 CET	80	58454	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:01.666392088 CET	58454	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:01.666470051 CET	58454	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:01.671221972 CET	80	58454	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:01.708030939 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:02.730010986 CET	80	58454	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:02.730026960 CET	80	58454	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:02.730038881 CET	80	58454	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:02.730138063 CET	58454	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:02.882745028 CET	80	58454	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:02.882827997 CET	58454	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:02.882889986 CET	58454	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:02.883264065 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:02.887706041 CET	80	58454	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:02.888022900 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:03.278855085 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:03.279653072 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:03.284493923 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:03.740256071 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:03.740643978 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:03.745498896 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:04.148083925 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:04.149229050 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:04.154198885 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:04.156954050 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:04.161782980 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:04.593219042 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:04.595546007 CET	58467	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:04.600337029 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:04.600954056 CET	58467	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:04.601057053 CET	58467	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:04.606184006 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:04.645503044 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:05.370913982 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.371006966 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.371023893 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.371040106 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.371054888 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.371072054 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.371090889 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.371107101 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.371119976 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.371134996 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.371227026 CET	58467	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:05.376106977 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.376133919 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.376195908 CET	58467	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:05.380342007 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.380486965 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.380541086 CET	58467	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:05.380563021 CET	58467	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:05.381006956 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:05.385479927 CET	80	58467	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:05.385824919 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:05.385869980 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:05.390747070 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:06.028646946 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:06.029769897 CET	58475	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:06.034559011 CET	80	58475	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:06.034630060 CET	58475	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:06.034702063 CET	58475	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:06.039433002 CET	80	58475	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:06.083050966 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:06.797430992 CET	80	58475	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:06.797574043 CET	58475	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:06.797641993 CET	58475	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:06.798208952 CET	58479	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:06.802443981 CET	80	58475	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:06.803035021 CET	80	58479	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:06.803128958 CET	58479	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:06.803216934 CET	58479	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:06.808099985 CET	80	58479	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:07.572335005 CET	80	58479	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:07.572355986 CET	80	58479	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:07.572482109 CET	58479	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:07.572518110 CET	80	58479	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:07.572535038 CET	80	58479	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:07.572556973 CET	80	58479	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:07.572587967 CET	58479	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:07.582796097 CET	80	58479	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:07.582860947 CET	58479	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:07.582904100 CET	58479	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:07.583436966 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:07.587723017 CET	80	58479	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:07.588382006 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:08.015150070 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:08.015836000 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:08.020709991 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:08.530616045 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:08.530932903 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:08.535842896 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:09.038243055 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:09.047190905 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:09.052304029 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:09.052364111 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:09.057133913 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:09.358175039 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:09.359452009 CET	58492	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:09.364233971 CET	80	58492	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:09.364325047 CET	58492	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:09.364368916 CET	58492	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:09.369294882 CET	80	58492	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:09.411117077 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:10.447628021 CET	80	58492	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:10.447710991 CET	58492	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:10.447793961 CET	58492	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:10.448379993 CET	58498	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:10.453381062 CET	80	58492	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:10.453819990 CET	80	58498	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:10.453896046 CET	58498	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:10.453960896 CET	58498	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:10.459502935 CET	80	58498	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:11.498451948 CET	80	58498	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:11.498467922 CET	80	58498	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:11.498549938 CET	58498	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:11.498779058 CET	80	58498	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:11.498847008 CET	58498	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:11.499030113 CET	58498	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:11.499161959 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:11.499691963 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:11.505229950 CET	80	58498	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:11.505245924 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:11.505379915 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:11.505728006 CET	993	58360	51.159.195.41	192.168.2.5
Nov 3, 2024 09:36:11.505779028 CET	58360	993	192.168.2.5	51.159.195.41
Nov 3, 2024 09:36:11.615756989 CET	58504	50	192.168.2.5	79.114.91.145
Nov 3, 2024 09:36:11.620589972 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:11.620696068 CET	58504	50	192.168.2.5	79.114.91.145
Nov 3, 2024 09:36:11.620985031 CET	58504	50	192.168.2.5	79.114.91.145
Nov 3, 2024 09:36:11.625840902 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:12.742531061 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:12.744003057 CET	58504	50	192.168.2.5	79.114.91.145
Nov 3, 2024 09:36:12.748789072 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:13.071263075 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:13.071746111 CET	58504	50	192.168.2.5	79.114.91.145
Nov 3, 2024 09:36:13.076600075 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:13.401587009 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:13.401602030 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:13.401671886 CET	58504	50	192.168.2.5	79.114.91.145
Nov 3, 2024 09:36:13.402425051 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:13.402548075 CET	58504	50	192.168.2.5	79.114.91.145
Nov 3, 2024 09:36:13.403022051 CET	58512	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:13.408283949 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:13.408890009 CET	80	58512	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:13.408960104 CET	58512	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:13.409082890 CET	58512	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:13.414583921 CET	80	58512	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:15.190237999 CET	80	58512	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:15.190403938 CET	58512	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:15.190535069 CET	58512	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:15.191109896 CET	58521	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:15.195358992 CET	80	58512	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:15.195902109 CET	80	58521	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:15.196011066 CET	58521	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:15.196023941 CET	58521	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:15.200886965 CET	80	58521	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:15.881556034 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:15.886403084 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:15.886511087 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:15.886769056 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:15.891551971 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:15.967279911 CET	80	58521	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:15.967453957 CET	58521	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:15.967526913 CET	58521	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:15.968096018 CET	58527	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:15.972399950 CET	80	58521	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:15.972872019 CET	80	58527	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:15.972960949 CET	58527	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:15.973056078 CET	58527	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:15.978053093 CET	80	58527	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:16.789608002 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:16.833039999 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:16.844116926 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:16.849030972 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:17.029958963 CET	80	58527	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:17.030025959 CET	58527	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:17.031284094 CET	58527	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:17.032500982 CET	58504	50	192.168.2.5	79.114.91.145
Nov 3, 2024 09:36:17.032526970 CET	58504	50	192.168.2.5	79.114.91.145
Nov 3, 2024 09:36:17.036134005 CET	80	58527	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:17.037424088 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:17.037866116 CET	50	58504	79.114.91.145	192.168.2.5
Nov 3, 2024 09:36:17.037918091 CET	58504	50	192.168.2.5	79.114.91.145
Nov 3, 2024 09:36:17.039343119 CET	58532	444	192.168.2.5	92.119.124.84
Nov 3, 2024 09:36:17.044125080 CET	444	58532	92.119.124.84	192.168.2.5
Nov 3, 2024 09:36:17.044192076 CET	58532	444	192.168.2.5	92.119.124.84
Nov 3, 2024 09:36:17.044342041 CET	58532	444	192.168.2.5	92.119.124.84
Nov 3, 2024 09:36:17.049060106 CET	444	58532	92.119.124.84	192.168.2.5
Nov 3, 2024 09:36:17.073132992 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:17.073447943 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:17.078296900 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:17.302145958 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:17.302167892 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:17.302401066 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:17.302895069 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:17.302897930 CET	58534	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:17.307710886 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:17.307780981 CET	80	58534	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:17.307878971 CET	58534	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:17.307956934 CET	58534	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:17.312737942 CET	80	58534	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:18.068490982 CET	80	58534	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:18.068612099 CET	58534	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:18.068706036 CET	58534	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:18.069315910 CET	58539	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:18.073549986 CET	80	58534	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:18.074203968 CET	80	58539	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:18.074280024 CET	58539	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:18.074362993 CET	58539	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:18.079207897 CET	80	58539	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:18.094732046 CET	444	58532	92.119.124.84	192.168.2.5
Nov 3, 2024 09:36:18.096169949 CET	58532	444	192.168.2.5	92.119.124.84
Nov 3, 2024 09:36:18.101131916 CET	444	58532	92.119.124.84	192.168.2.5
Nov 3, 2024 09:36:18.397557020 CET	444	58532	92.119.124.84	192.168.2.5
Nov 3, 2024 09:36:18.398241043 CET	58532	444	192.168.2.5	92.119.124.84
Nov 3, 2024 09:36:18.403165102 CET	444	58532	92.119.124.84	192.168.2.5
Nov 3, 2024 09:36:18.699430943 CET	444	58532	92.119.124.84	192.168.2.5
Nov 3, 2024 09:36:18.699449062 CET	444	58532	92.119.124.84	192.168.2.5
Nov 3, 2024 09:36:18.699575901 CET	58532	444	192.168.2.5	92.119.124.84
Nov 3, 2024 09:36:18.699678898 CET	58532	444	192.168.2.5	92.119.124.84
Nov 3, 2024 09:36:18.700378895 CET	58542	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:18.704597950 CET	444	58532	92.119.124.84	192.168.2.5
Nov 3, 2024 09:36:18.705213070 CET	80	58542	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:18.705293894 CET	58542	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:18.705353022 CET	58542	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:18.710129976 CET	80	58542	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:19.120434999 CET	80	58539	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:19.120471001 CET	80	58539	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:19.120484114 CET	80	58539	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:19.120526075 CET	58539	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:19.161195993 CET	58539	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:19.266827106 CET	80	58539	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:19.266932964 CET	58539	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:19.267011881 CET	58539	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:19.267554998 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:19.271859884 CET	80	58539	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:19.272413015 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:19.499752045 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:19.551728010 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:19.567846060 CET	58543	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:19.572736025 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:19.572798967 CET	58543	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:19.572884083 CET	58543	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:19.577760935 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:19.773253918 CET	80	58542	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:19.773334026 CET	58542	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:19.773495913 CET	58542	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:19.773969889 CET	58544	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:19.778326035 CET	80	58542	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:19.778822899 CET	80	58544	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:19.778891087 CET	58544	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:19.780057907 CET	58544	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:19.785039902 CET	80	58544	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:20.634531021 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.634555101 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.634566069 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.634577990 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.634592056 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.634603977 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.634615898 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.634628057 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.634633064 CET	58543	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:20.634640932 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.634653091 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.634687901 CET	58543	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:20.634707928 CET	58543	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:20.639492989 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.639513969 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.639586926 CET	58543	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:20.789623022 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.789721966 CET	58543	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:20.789782047 CET	58543	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:20.790215015 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:20.790574074 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:20.791198969 CET	58545	443	192.168.2.5	185.101.139.172
Nov 3, 2024 09:36:20.791234970 CET	443	58545	185.101.139.172	192.168.2.5
Nov 3, 2024 09:36:20.791306973 CET	58545	443	192.168.2.5	185.101.139.172
Nov 3, 2024 09:36:20.791456938 CET	58545	443	192.168.2.5	185.101.139.172
Nov 3, 2024 09:36:20.791475058 CET	443	58545	185.101.139.172	192.168.2.5
Nov 3, 2024 09:36:20.794698000 CET	80	58543	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.794976950 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:20.795612097 CET	9001	58526	155.248.227.210	192.168.2.5
Nov 3, 2024 09:36:20.795660973 CET	58526	9001	192.168.2.5	155.248.227.210
Nov 3, 2024 09:36:20.834887028 CET	80	58544	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:20.834952116 CET	58544	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:20.835012913 CET	58544	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:20.835545063 CET	58546	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:20.839783907 CET	80	58544	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:20.840348005 CET	80	58546	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:20.840440035 CET	58546	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:20.840493917 CET	58546	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:20.845288038 CET	80	58546	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:21.895204067 CET	80	58546	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:21.895317078 CET	58546	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:21.895401001 CET	58546	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:21.896050930 CET	58532	444	192.168.2.5	92.119.124.84
Nov 3, 2024 09:36:21.896095991 CET	58532	444	192.168.2.5	92.119.124.84
Nov 3, 2024 09:36:21.896716118 CET	58547	443	192.168.2.5	209.58.145.210
Nov 3, 2024 09:36:21.896734953 CET	443	58547	209.58.145.210	192.168.2.5
Nov 3, 2024 09:36:21.896802902 CET	58547	443	192.168.2.5	209.58.145.210
Nov 3, 2024 09:36:21.896955013 CET	58547	443	192.168.2.5	209.58.145.210
Nov 3, 2024 09:36:21.896967888 CET	443	58547	209.58.145.210	192.168.2.5
Nov 3, 2024 09:36:21.900202990 CET	80	58546	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:21.900780916 CET	444	58532	92.119.124.84	192.168.2.5
Nov 3, 2024 09:36:21.901396990 CET	444	58532	92.119.124.84	192.168.2.5
Nov 3, 2024 09:36:21.901449919 CET	58532	444	192.168.2.5	92.119.124.84
Nov 3, 2024 09:36:22.189126968 CET	443	58545	185.101.139.172	192.168.2.5
Nov 3, 2024 09:36:22.189232111 CET	58545	443	192.168.2.5	185.101.139.172
Nov 3, 2024 09:36:22.190888882 CET	58545	443	192.168.2.5	185.101.139.172
Nov 3, 2024 09:36:22.190901995 CET	443	58545	185.101.139.172	192.168.2.5
Nov 3, 2024 09:36:22.191144943 CET	443	58545	185.101.139.172	192.168.2.5
Nov 3, 2024 09:36:22.191495895 CET	58545	443	192.168.2.5	185.101.139.172
Nov 3, 2024 09:36:22.239327908 CET	443	58545	185.101.139.172	192.168.2.5
Nov 3, 2024 09:36:22.920857906 CET	443	58547	209.58.145.210	192.168.2.5
Nov 3, 2024 09:36:22.921029091 CET	58547	443	192.168.2.5	209.58.145.210
Nov 3, 2024 09:36:22.922652960 CET	58547	443	192.168.2.5	209.58.145.210
Nov 3, 2024 09:36:22.922658920 CET	443	58547	209.58.145.210	192.168.2.5
Nov 3, 2024 09:36:22.922975063 CET	443	58547	209.58.145.210	192.168.2.5
Nov 3, 2024 09:36:22.923376083 CET	58547	443	192.168.2.5	209.58.145.210
Nov 3, 2024 09:36:22.971328020 CET	443	58547	209.58.145.210	192.168.2.5
Nov 3, 2024 09:36:24.584379911 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:24.589296103 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:24.589464903 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:24.589737892 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:24.594598055 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:25.648041964 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:25.649486065 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:25.654304028 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:25.957554102 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:25.958013058 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:25.962826014 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:26.266725063 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:26.266746044 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:26.266824961 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:26.267060995 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:26.267699003 CET	58549	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:26.271826029 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:26.272468090 CET	80	58549	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:26.272543907 CET	58549	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:26.272592068 CET	58549	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:26.277379036 CET	80	58549	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:28.340900898 CET	80	58549	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:28.340981960 CET	58549	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:28.343153954 CET	58549	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:28.347301006 CET	58550	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:28.347948074 CET	80	58549	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:28.352157116 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:28.352237940 CET	58550	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:28.354772091 CET	58550	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:28.359621048 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.404445887 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.404468060 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.404480934 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.404536009 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.404542923 CET	58550	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:29.404552937 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.404563904 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.404577017 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.404588938 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.404601097 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.404607058 CET	58550	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:29.404640913 CET	58550	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:29.457999945 CET	58550	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:29.741070986 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.741147041 CET	58550	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:29.741188049 CET	58550	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:29.741573095 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:29.746000051 CET	80	58550	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:29.746566057 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:30.049834013 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:30.051064014 CET	58551	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:30.056097984 CET	80	58551	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:30.056204081 CET	58551	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:30.056241035 CET	58551	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:30.061005116 CET	80	58551	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:30.098606110 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:31.106969118 CET	80	58551	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:31.107072115 CET	58551	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:31.107127905 CET	58551	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:31.107647896 CET	58552	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:31.111942053 CET	80	58551	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:31.112441063 CET	80	58552	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:31.112498999 CET	58552	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:31.112550020 CET	58552	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:31.117296934 CET	80	58552	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:31.872502089 CET	80	58552	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:31.872535944 CET	80	58552	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:31.872549057 CET	80	58552	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:31.872560024 CET	80	58552	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:31.872795105 CET	58552	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:31.872795105 CET	58552	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:31.880467892 CET	80	58552	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:31.880527973 CET	58552	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:31.880594015 CET	58552	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:31.881019115 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:31.885581970 CET	80	58552	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:31.885790110 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:33.118732929 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:33.119595051 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:33.125536919 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:33.581036091 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:33.581526041 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:33.586509943 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:33.889969110 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:33.890767097 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:33.896420002 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:35.038675070 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:35.041610003 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:35.046823978 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:35.494858980 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:35.495107889 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:35.499882936 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:36.038750887 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:36.084975004 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:36.099421024 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:36.099675894 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:36.104542017 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:36.104620934 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:36.109441996 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:36.414689064 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:36.415373087 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:36.420171976 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:36.420262098 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:36.425060987 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:36.729984999 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:36.730602026 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:36.735380888 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:36.735474110 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:36.740297079 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:37.047008991 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:37.047875881 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:37.052690983 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:37.735394001 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:37.736480951 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:37.741286993 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:38.245783091 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:38.246129036 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:38.251339912 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:38.677222013 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:38.677485943 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:38.682301998 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:38.682373047 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:38.687232018 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:38.994421959 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:38.995059967 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:39.000340939 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:39.000394106 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:39.005134106 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:39.308445930 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:39.309377909 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:39.314229012 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:39.650501966 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:39.651200056 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:39.656923056 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:39.992592096 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:39.992934942 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:39.999222994 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:40.334877014 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:40.379882097 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:40.488712072 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:40.489072084 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:40.489339113 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:40.494064093 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:40.494194984 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:40.494599104 CET	9004	58548	185.220.101.3	192.168.2.5
Nov 3, 2024 09:36:40.494652033 CET	58548	9004	192.168.2.5	185.220.101.3
Nov 3, 2024 09:36:40.599570036 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:40.604545116 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:40.604820967 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:40.604863882 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:40.609843016 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:41.666430950 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:41.667979002 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:41.672694921 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:41.984754086 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:41.985202074 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:41.990699053 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:42.299109936 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:42.299144983 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:42.299242973 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:42.299361944 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:42.299909115 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:42.304215908 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:42.304682970 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:42.304764032 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:42.304800987 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:42.309540033 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.520889044 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.520909071 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.520921946 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.520932913 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.520944118 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.520973921 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:43.521004915 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:43.530499935 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.530514002 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.530564070 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:43.669734955 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.669750929 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.669765949 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.669819117 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:43.669847012 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.669858932 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.669903040 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:43.670077085 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.670121908 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:43.670200109 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.670264006 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.670308113 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:43.670345068 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.670393944 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:43.670435905 CET	58554	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:43.670841932 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:43.675236940 CET	80	58554	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:43.675744057 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:43.988589048 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:43.990093946 CET	58555	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:43.994946957 CET	80	58555	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:43.995043039 CET	58555	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:43.997437000 CET	58555	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:44.002727032 CET	80	58555	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:44.036118031 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:45.060602903 CET	80	58555	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:45.063100100 CET	58555	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:45.063159943 CET	58555	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:45.063714027 CET	58556	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:45.068025112 CET	80	58555	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:45.068558931 CET	80	58556	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:45.068670034 CET	58556	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:45.068762064 CET	58556	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:45.073637962 CET	80	58556	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:46.118191004 CET	80	58556	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:46.118330002 CET	58556	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:46.118731976 CET	58556	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:46.119282007 CET	58557	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:46.123478889 CET	80	58556	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:46.124064922 CET	80	58557	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:46.124156952 CET	58557	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:46.144495010 CET	58557	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:46.149327040 CET	80	58557	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:47.166168928 CET	80	58557	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:47.166311026 CET	58557	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:47.166363001 CET	58557	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:47.166687965 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:47.166992903 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:47.167581081 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:47.171140909 CET	80	58557	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:47.171493053 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:47.172041893 CET	9006	58553	192.42.116.189	192.168.2.5
Nov 3, 2024 09:36:47.172113895 CET	58553	9006	192.168.2.5	192.42.116.189
Nov 3, 2024 09:36:47.172350883 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:47.172471046 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:47.172652006 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:47.177417994 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:48.250746965 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:48.252351046 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:48.257085085 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:48.567373991 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:48.567792892 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:48.572616100 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:48.883467913 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:48.883482933 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:48.883549929 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:48.883721113 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:48.884547949 CET	58559	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:48.888516903 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:48.889328957 CET	80	58559	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:48.889395952 CET	58559	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:48.889532089 CET	58559	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:48.894654036 CET	80	58559	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:50.147154093 CET	80	58559	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:50.148380041 CET	58559	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:50.148427010 CET	58559	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:50.148951054 CET	58560	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:50.153230906 CET	80	58559	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:50.153740883 CET	80	58560	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:50.153820038 CET	58560	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:50.153862953 CET	58560	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:50.158659935 CET	80	58560	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:51.200177908 CET	80	58560	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:51.200265884 CET	58560	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:51.200311899 CET	58560	80	192.168.2.5	45.66.35.11
Nov 3, 2024 09:36:51.200825930 CET	58561	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:51.205111027 CET	80	58560	45.66.35.11	192.168.2.5
Nov 3, 2024 09:36:51.205575943 CET	80	58561	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:51.205665112 CET	58561	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:51.205715895 CET	58561	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:51.210613012 CET	80	58561	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:51.964517117 CET	80	58561	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:51.964531898 CET	80	58561	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:51.964543104 CET	80	58561	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:51.964600086 CET	58561	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:51.982554913 CET	80	58561	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:51.982711077 CET	58561	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:51.982737064 CET	58561	80	192.168.2.5	216.218.219.41
Nov 3, 2024 09:36:51.983083963 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:51.987692118 CET	80	58561	216.218.219.41	192.168.2.5
Nov 3, 2024 09:36:51.987840891 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:52.178445101 CET	58562	443	192.168.2.5	205.185.119.222
Nov 3, 2024 09:36:52.178483009 CET	443	58562	205.185.119.222	192.168.2.5
Nov 3, 2024 09:36:52.178565025 CET	58562	443	192.168.2.5	205.185.119.222
Nov 3, 2024 09:36:52.178757906 CET	58562	443	192.168.2.5	205.185.119.222
Nov 3, 2024 09:36:52.178772926 CET	443	58562	205.185.119.222	192.168.2.5
Nov 3, 2024 09:36:52.301035881 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:52.302326918 CET	58563	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:52.307651997 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:52.307735920 CET	58563	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:52.307780981 CET	58563	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:52.312733889 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:52.348630905 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:52.912441015 CET	58564	443	192.168.2.5	143.244.172.37
Nov 3, 2024 09:36:52.912481070 CET	443	58564	143.244.172.37	192.168.2.5
Nov 3, 2024 09:36:52.912569046 CET	58564	443	192.168.2.5	143.244.172.37
Nov 3, 2024 09:36:52.913599968 CET	58564	443	192.168.2.5	143.244.172.37
Nov 3, 2024 09:36:52.913614035 CET	443	58564	143.244.172.37	192.168.2.5
Nov 3, 2024 09:36:53.150399923 CET	443	58562	205.185.119.222	192.168.2.5
Nov 3, 2024 09:36:53.150496960 CET	58562	443	192.168.2.5	205.185.119.222
Nov 3, 2024 09:36:53.152149916 CET	58562	443	192.168.2.5	205.185.119.222
Nov 3, 2024 09:36:53.152158976 CET	443	58562	205.185.119.222	192.168.2.5
Nov 3, 2024 09:36:53.152374983 CET	443	58562	205.185.119.222	192.168.2.5
Nov 3, 2024 09:36:53.152868032 CET	58562	443	192.168.2.5	205.185.119.222
Nov 3, 2024 09:36:53.195365906 CET	443	58562	205.185.119.222	192.168.2.5
Nov 3, 2024 09:36:53.365559101 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.365587950 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.365600109 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.365611076 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.365622044 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.365633965 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.365643978 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.365655899 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.365658998 CET	58563	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:53.365664959 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.365683079 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.365688086 CET	58563	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:53.365701914 CET	58563	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:53.365744114 CET	58563	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:53.370560884 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.370573044 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.370589972 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.370614052 CET	58563	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:53.411117077 CET	58563	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:53.515832901 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.515919924 CET	58563	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:53.515974998 CET	58563	80	192.168.2.5	193.23.244.244
Nov 3, 2024 09:36:53.516408920 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:53.516736984 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:53.517278910 CET	58565	443	192.168.2.5	89.185.85.140
Nov 3, 2024 09:36:53.517338991 CET	443	58565	89.185.85.140	192.168.2.5
Nov 3, 2024 09:36:53.517417908 CET	58565	443	192.168.2.5	89.185.85.140
Nov 3, 2024 09:36:53.517545938 CET	58565	443	192.168.2.5	89.185.85.140
Nov 3, 2024 09:36:53.517566919 CET	443	58565	89.185.85.140	192.168.2.5
Nov 3, 2024 09:36:53.520728111 CET	80	58563	193.23.244.244	192.168.2.5
Nov 3, 2024 09:36:53.521215916 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:53.521805048 CET	9001	58558	130.225.244.90	192.168.2.5
Nov 3, 2024 09:36:53.521868944 CET	58558	9001	192.168.2.5	130.225.244.90
Nov 3, 2024 09:36:54.050566912 CET	443	58564	143.244.172.37	192.168.2.5
Nov 3, 2024 09:36:54.050729990 CET	58564	443	192.168.2.5	143.244.172.37
Nov 3, 2024 09:36:54.052377939 CET	58564	443	192.168.2.5	143.244.172.37
Nov 3, 2024 09:36:54.052390099 CET	443	58564	143.244.172.37	192.168.2.5
Nov 3, 2024 09:36:54.052618980 CET	443	58564	143.244.172.37	192.168.2.5
Nov 3, 2024 09:36:54.052931070 CET	58564	443	192.168.2.5	143.244.172.37
Nov 3, 2024 09:36:54.099339008 CET	443	58564	143.244.172.37	192.168.2.5
Nov 3, 2024 09:36:54.933283091 CET	443	58565	89.185.85.140	192.168.2.5
Nov 3, 2024 09:36:54.933346987 CET	58565	443	192.168.2.5	89.185.85.140
Nov 3, 2024 09:36:54.934995890 CET	58565	443	192.168.2.5	89.185.85.140
Nov 3, 2024 09:36:54.935003996 CET	443	58565	89.185.85.140	192.168.2.5
Nov 3, 2024 09:36:54.935234070 CET	443	58565	89.185.85.140	192.168.2.5
Nov 3, 2024 09:36:54.935585022 CET	58565	443	192.168.2.5	89.185.85.140
Nov 3, 2024 09:36:54.983339071 CET	443	58565	89.185.85.140	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 3, 2024 09:35:45.137370110 CET	53	49856	162.159.36.2	192.168.2.5
Nov 3, 2024 09:35:45.917341948 CET	53	60596	1.1.1.1	192.168.2.5

HTTP Request Dependency Graph

131.188.40.189

45.66.35.11

216.218.219.41

193.23.244.244

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	131.188.40.189	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:34:59.428762913 CET	154	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 131.188.40.189 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:00.475833893 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:00 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Sun, 03 Nov 2024 09:00:00 GMT Vary: X-Or-Diff-From-Consensus Data Raw: 6e 65 74 77 6f 72 6b 2d 73 74 61 74 75 73 2d 76 65 72 73 69 6f 6e 20 33 0a 76 6f 74 65 2d 73 74 61 74 75 73 20 63 6f 6e 73 65 6e 73 75 73 0a 63 6f 6e 73 65 6e 73 75 73 2d 6d 65 74 68 6f 64 20 33 33 0a 76 61 6c 69 64 2d 61 66 74 65 72 20 32 30 32 34 2d 31 31 2d 30 33 20 30 38 3a 30 30 3a 30 30 0a 66 72 65 73 68 2d 75 6e 74 69 6c 20 32 30 32 34 2d 31 31 2d 30 33 20 30 39 3a 30 30 3a 30 30 0a 76 61 6c 69 64 2d 75 6e 74 69 6c 20 32 30 32 34 2d 31 31 2d 30 33 20 31 31 3a 30 30 3a 30 30 0a 76 6f 74 69 6e 67 2d 64 65 6c 61 79 20 33 30 30 20 33 30 30 0a 63 6c 69 65 6e 74 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 38 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 38 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 38 2e 33 2d 72 63 2c 30 2e 34 2e 38 2e 34 2c 30 2e 34 2e 38 2e 35 2c 30 2e 34 2e 38 2e 36 2c 30 2e 34 2e 38 2e 37 2c 30 2e 34 2e 38 2e 38 2c 30 2e 34 2e 38 2e 39 2c 30 2e 34 2e 38 2e 31 30 2c 30 2e 34 2e 38 2e 31 31 2c 30 2e 34 2e 38 2e 31 32 2c 30 2e 34 2e 38 2e 31 33 0a 73 65 72 76 65 72 2d 76 65 72 73 69 6f 6e 73 [TRUNCATED] Data Ascii: network-status-version 3vote-status consensusconsensus-method 33valid-after 2024-11-03 08:00:00fresh-until 2024-11-03 09:00:00valid-until 2024-11-03 11:00:00voting-delay 300 300client-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13server-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Validrecommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2params AuthDirMa [TRUNCATED]
Nov 3, 2024 09:35:00.475855112 CET	212	IN	Data Raw: 50 65 72 41 64 64 72 3d 38 20 43 69 72 63 75 69 74 50 72 69 6f 72 69 74 79 48 61 6c 66 6c 69 66 65 4d 73 65 63 3d 33 30 30 30 30 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 42 75 72 73 74 3d 36 30 20 44 6f 53 43 69 72 63 75 69 74 43 Data Ascii: PerAddr=8 CircuitPriorityHalflifeMsec=30000 DoSCircuitCreationBurst=60 DoSCircuitCreationEnabled=1 DoSCircuitCreationMinConnections=2 DoSCircuitCreationRate=2 DoSConnectionEnabled=1 DoSConnectionMaxConcurrentCoun
Nov 3, 2024 09:35:00.475864887 CET	1236	IN	Data Raw: 74 3d 35 30 20 44 6f 53 52 65 66 75 73 65 53 69 6e 67 6c 65 48 6f 70 43 6c 69 65 6e 74 52 65 6e 64 65 7a 76 6f 75 73 3d 31 20 45 78 74 65 6e 64 42 79 45 64 32 35 35 31 39 49 44 3d 31 20 4b 49 53 54 53 63 68 65 64 52 75 6e 49 6e 74 65 72 76 61 6c Data Ascii: t=50 DoSRefuseSingleHopClientRendezvous=1 ExtendByEd25519ID=1 KISTSchedRunInterval=3 NumNTorsPerTAP=100 UseOptimisticData=1 bwauthpid=1 bwscanner_cc=1 cbttestfreq=10 cc_alg=2 cc_cwnd_full_gap=4 cc_cwnd_full_minpct=25 cc_cwnd_inc=1 cc_cwnd_inc_
Nov 3, 2024 09:35:00.475878000 CET	1236	IN	Data Raw: 72 69 73 65 75 70 20 64 6f 74 20 6e 65 74 3e 20 2d 20 31 6e 4e 7a 65 6b 75 48 47 47 7a 42 59 52 7a 79 6a 66 6a 46 45 66 65 69 73 4e 76 78 6b 6e 34 52 54 0a 76 6f 74 65 2d 64 69 67 65 73 74 20 34 44 42 36 36 36 35 44 37 43 36 39 34 41 30 30 35 46 Data Ascii: riseup dot net> - 1nNzekuHGGzBYRzyjfjFEfeisNvxkn4RTvote-digest 4DB6665D7C694A005F4E3968DD8E545EB16C1969dir-source bastet 27102BC123E7AF1D4741AE047E160C91ADC76B21 204.13.164.118 204.13.164.118 80 443contact stefani <nocat at readthefinemanua
Nov 3, 2024 09:35:00.475889921 CET	1236	IN	Data Raw: 32 35 43 45 46 35 31 35 42 32 32 36 20 31 33 31 2e 31 38 38 2e 34 30 2e 31 38 39 20 31 33 31 2e 31 38 38 2e 34 30 2e 31 38 39 20 38 30 20 34 34 33 0a 63 6f 6e 74 61 63 74 20 34 30 39 36 52 2f 32 36 31 43 35 46 42 45 37 37 32 38 35 46 38 38 46 42 Data Ascii: 25CEF515B226 131.188.40.189 131.188.40.189 80 443contact 4096R/261C5FBE77285F88FB0C343266C8C2D7C5AA446D Sebastian Hahn <tor@sebastianhahn.net> - 12NbRAjAG5U3LLWETSF7fSTcdaz32Mu5CNvote-digest A9A478340E574B694C1280253DF303D0F2F05DDFdir-sourc
Nov 3, 2024 09:35:00.475900888 CET	636	IN	Data Raw: 35 30 30 2c 31 35 33 33 2c 31 36 37 37 2c 31 37 32 33 2c 31 37 35 35 2c 31 38 36 33 2c 32 30 38 32 2d 32 30 38 33 2c 32 30 38 36 2d 32 30 38 37 2c 32 30 39 35 2d 32 30 39 36 2c 32 31 30 32 2d 32 31 30 34 2c 33 31 32 38 2c 33 33 38 39 2c 33 36 39 Data Ascii: 500,1533,1677,1723,1755,1863,2082-2083,2086-2087,2095-2096,2102-2104,3128,3389,3690,4321,4643,5050,5190,5222-5223,5228,5900,6660-6669,6679,6697,8000,8008,8074,8080,8082,8087-8088,8332-8333,8443,8888,9418,9999-10000,11371,19294,19638,50002,6473
Nov 3, 2024 09:35:00.475913048 CET	1236	IN	Data Raw: 2c 31 33 35 2d 31 33 39 2c 31 34 33 2c 34 34 35 2c 34 36 35 2c 35 36 33 2c 35 38 37 2c 39 39 33 2c 31 32 31 34 2c 32 35 32 35 2c 32 37 31 30 2c 34 36 36 31 2d 34 36 36 36 2c 36 33 34 36 2d 36 34 32 39 2c 36 36 39 39 2c 36 38 38 31 2d 36 39 39 39 Data Ascii: ,135-139,143,445,465,563,587,993,1214,2525,2710,4661-4666,6346-6429,6699,6881-6999,55000r titamon3 ABElTMhEQ2myDvERVriZBDgiGlQ LhUfhlFczLBaOAGgUrJPC4oYLb4 2024-11-02 13:59:24 178.218.144.18 443 0s Exit Fast Guard Running Stable V2Dir Validv
Nov 3, 2024 09:35:00.476074934 CET	1164	IN	Data Raw: 2c 36 33 36 2c 37 30 36 2c 37 34 39 2c 38 37 33 2c 39 30 32 2d 39 30 34 2c 39 38 31 2c 39 38 39 2d 39 39 35 2c 31 31 39 34 2c 31 32 32 30 2c 31 32 39 33 2c 31 35 30 30 2c 31 35 33 33 2c 31 36 37 37 2c 31 37 32 33 2c 31 37 35 35 2c 31 38 36 33 2c Data Ascii: ,636,706,749,873,902-904,981,989-995,1194,1220,1293,1500,1533,1677,1723,1755,1863,2082-2083,2086-2087,2095-2096,2102-2104,3128,3389,3690,4321,4643,5050,5190,5222-5223,5228,5900,6660-6669,6679,6697,8000,8008,8074,8080,8087-8088,8332-8333,8443,8
Nov 3, 2024 09:35:00.476094961 CET	1236	IN	Data Raw: 44 69 72 20 56 61 6c 69 64 0a 76 20 54 6f 72 20 30 2e 34 2e 38 2e 31 32 0a 70 72 20 43 6f 6e 66 6c 75 78 3d 31 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 Data Ascii: Dir Validv Tor 0.4.8.12pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=43000p reject 1-65535r skylarkRelay ACQOyytTWqTB4YdNdE36avLl6U
Nov 3, 2024 09:35:00.476105928 CET	1236	IN	Data Raw: 33 20 4d 69 63 72 6f 64 65 73 63 3d 31 2d 32 20 50 61 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 34 31 30 30 30 0a 70 20 72 65 6a 65 63 74 20 31 2d 36 35 35 33 35 0a 72 20 46 6f 72 50 72 69 76 61 63 Data Ascii: 3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=41000p reject 1-65535r ForPrivacyNET ADb6NqtDX9XQ9kBiZjaGfr+3LGg PVQK4DE1c8hk1eyBChXlin9oAGI 2024-11-03 03:30:21 185.220.101.33 10133 0a [2a0b:f4c2:2::33]:10133s Exit Fast Guard Running Stabl
Nov 3, 2024 09:35:00.480936050 CET	1236	IN	Data Raw: 31 2e 31 35 2e 37 35 2e 31 32 30 20 34 34 34 20 30 0a 61 20 5b 32 30 30 31 3a 62 63 38 3a 31 38 36 30 3a 36 30 37 3a 3a 31 5d 3a 34 34 34 0a 73 20 46 61 73 74 20 47 75 61 72 64 20 52 75 6e 6e 69 6e 67 20 53 74 61 62 6c 65 20 56 32 44 69 72 20 56 Data Ascii: 1.15.75.120 444 0a [2001:bc8:1860:607::1]:444s Fast Guard Running Stable V2Dir Validv Tor 0.4.8.13pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49706	45.66.35.11	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:03.673938036 CET	172	OUT	GET /tor/server/fp/640e37801c0f83a8d68105010dfe89302e03162c HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:04.723742008 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:04 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:04 GMT Data Raw: 72 6f 75 74 65 72 20 70 61 72 61 6e 6f 69 64 41 6e 64 72 6f 69 64 20 39 36 2e 32 34 34 2e 33 38 2e 31 33 31 20 34 32 39 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 68 65 41 62 38 41 4b 47 51 4d 64 38 56 33 5a 5a 4c 6d 4b 57 6e 79 58 41 65 51 37 44 4c 49 47 6b 53 71 59 78 59 4b 66 62 2b 79 4a 76 32 63 41 51 41 67 42 41 43 55 4f 78 36 73 0a 31 67 56 37 44 73 37 47 75 45 61 4f 44 76 48 48 4d 70 62 53 30 47 36 65 7a 4d 47 76 7a 37 31 71 4c 76 43 55 75 53 41 51 7a 35 30 6a 59 47 46 67 70 42 6a 55 58 51 55 76 31 38 66 48 41 69 6a 79 0a 47 69 4b 57 4d 37 70 56 65 66 63 65 46 57 70 38 57 6f 50 4e 35 65 75 53 57 4b 56 41 48 31 4b 38 51 56 46 4e 62 6c 37 43 65 42 44 76 62 75 2f 6d 6d 2f 41 70 55 51 64 51 6c 51 49 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6c 44 73 65 72 4e 59 46 [TRUNCATED] Data Ascii: router paranoidAndroid 96.244.38.131 42901 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1heAb8AKGQMd8V3ZZLmKWnyXAeQ7DLIGkSqYxYKfb+yJv2cAQAgBACUOx6s1gV7Ds7GuEaODvHHMpbS0G6ezMGvz71qLvCUuSAQz50jYGFgpBjUXQUv18fHAijyGiKWM7pVefceFWp8WoPN5euSWKVAH1K8QVFNbl7CeBDvbu/mm/ApUQdQlQI=-----END ED25519 CERT-----master-key-ed25519 lDserNYFew7OxrhGjg7xxzKW0tBunszBr8+9ai7wlLkor-address [2600:4040:b0de:5f00:7285:c2ff:fed3:c3c]:42901platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 19:07:30fingerprint 640E 3780 1C0F 83A8 D681 0501 0DFE 8930 2E03 162Cuptime 1034972bandwidth 524288 1048576 551847extra-info-digest 24B2A7C322136755032F308374360866528F5F5F qIM+HNRozA/WufARV1JLDFI7zYr1umzoeTvihYpVUKoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALEaVHtkkfYCRnTPYuT7TdDYmQ64K4rK8TL2r/RNWxDMtnX+dVUoqyF3uPrJ5MFmrMCZxTKMSKzYSU+IKiCJGwwn+xXBc1p+FyPiSHX/gb8KfE7C [TRUNCATED]
Nov 3, 2024 09:35:04.723891020 CET	1236	IN	Data Raw: 39 57 32 66 35 6e 4c 30 6d 32 79 75 2f 61 4e 72 42 67 59 78 5a 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 Data Ascii: 9W2f5nL0m2yu/aNrBgYxZAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL4Nar4/zUOJyb6bBzd12RGbPtKaTnnIt/yyrh77cDWX/jIrnfJgq/Q1KiffRGD9SUuRuOM3Nr60VLuZakqb7PJW/r3VhWebGK9ybdBxEjQUgxeftyzg6ay9KrVbMSIblZj
Nov 3, 2024 09:35:04.723901987 CET	47	IN	Data Raw: 2b 71 4e 52 79 4c 68 6e 52 7a 79 62 61 7a 77 52 49 33 45 31 30 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 53 49 47 4e 41 54 55 52 45 2d 2d 2d 2d 2d 0a Data Ascii: +qNRyLhnRzybazwRI3E10=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49707	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:05.105843067 CET	175	OUT	GET /tor/server/fp/7c6686190ce6e8a0a1a5b5b845bf3f14d252d0df HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:05.866151094 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:05 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:05 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 38 39 2e 35 38 2e 34 31 2e 31 35 36 20 31 31 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 57 78 64 46 45 43 6c 31 69 48 73 56 57 76 37 2f 55 75 6c 36 78 4a 43 6e 68 77 4a 6c 46 57 59 61 73 71 57 6a 51 4d 6e 39 6e 2f 37 41 51 41 67 42 41 41 36 37 48 38 46 0a 33 2f 62 51 6f 4c 70 34 41 7a 46 4a 4a 79 6e 6f 73 51 48 68 72 6c 4b 53 37 5a 61 38 6f 4c 4a 48 4d 53 34 64 67 41 69 66 38 4c 4a 56 53 55 35 4e 2b 52 6f 42 55 76 71 63 56 2f 6e 56 6f 32 52 33 0a 36 77 73 68 7a 56 61 71 63 35 6e 41 37 58 41 45 6f 78 69 6f 64 39 75 47 52 52 2b 37 51 41 75 44 41 35 7a 61 50 58 69 45 47 4a 78 42 6a 32 31 49 67 47 36 4d 71 78 6d 48 66 67 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4f 75 78 2f 42 64 2f 32 30 4b 43 36 65 41 [TRUNCATED] Data Ascii: router Quetzalcoatl 89.58.41.156 110 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAWxdFECl1iHsVWv7/Uul6xJCnhwJlFWYasqWjQMn9n/7AQAgBAA67H8F3/bQoLp4AzFJJynosQHhrlKS7Za8oLJHMS4dgAif8LJVSU5N+RoBUvqcV/nVo2R36wshzVaqc5nA7XAEoxiod9uGRR+7QAuDA5zaPXiEGJxBj21IgG6MqxmHfgE=-----END ED25519 CERT-----master-key-ed25519 Oux/Bd/20KC6eAMxSScp6LEB4a5Sku2WvKCyRzEuHYAor-address [2a03:4000:66:15:18a0:6bff:fe90:3147]:110platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:29:04fingerprint 7C66 8619 0CE6 E8A0 A1A5 B5B8 45BF 3F14 D252 D0DFuptime 324037bandwidth 1073741824 1073741824 15436800extra-info-digest EC6DB8A070669A632192157C71764F91056FDEF5 E6DtGOWUqXEkCvFhYKDCBmUoIPJLJd4R/c0WXYDcRk4onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMlcuFWR9hhczrNZVO5PpLL5IjSgICWoBM2p+7rSZNXUUgX+HkY3ipb8tneVB7Occf/iICypSiQKyfT4GCsjbW6U1a5eUCusEJHxRcflmZKi/LC/34/ [TRUNCATED]
Nov 3, 2024 09:35:05.866173983 CET	1236	IN	Data Raw: 59 6e 47 52 63 33 70 63 2b 39 73 64 33 44 54 63 33 66 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 Data Ascii: YnGRc3pc+9sd3DTc3fAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANPrtSmiREhMwOPwzqTXicivYpjJmZsMy4VdsG1GzX3Dv9NQ1ryiSp3T2d5o/AO1zuyzcascPB8xcIAZFI+vtGq5w0FMa/XIbfoknC6MmBi2k09OvP9gUJzVfgmifxklkuAFHW
Nov 3, 2024 09:35:05.866187096 CET	424	IN	Data Raw: 42 46 38 38 43 35 31 38 30 33 33 41 32 32 38 32 37 45 33 43 34 36 20 24 30 41 37 36 43 30 41 30 41 37 32 31 44 44 42 43 33 32 34 42 37 30 35 41 44 42 46 43 39 35 46 44 38 30 36 41 45 38 35 35 20 24 30 41 46 39 38 32 43 43 37 31 41 30 31 44 39 35 Data Ascii: BF88C518033A22827E3C46 $0A76C0A0A721DDBC324B705ADBFC95FD806AE855 $0AF982CC71A01D95E8959D763D0EC0E5A6C61244 $0B5BC76B3BE7553B229FD3E73F26AED41C31DD19 $0B8EF5F5016926F4245350FB37914E30BF36C528 $0CD666F9C9A40A8CFB1E6B9465597A51D3A1CBF8 $0CF48696F
Nov 3, 2024 09:35:05.866198063 CET	1236	IN	Data Raw: 46 38 30 36 38 46 38 30 36 45 45 33 35 33 32 35 34 31 20 24 31 32 37 45 38 30 33 38 38 38 44 38 32 46 33 33 43 43 33 43 33 31 31 45 43 43 36 43 43 45 42 37 37 30 38 38 33 31 43 42 20 24 31 33 30 43 46 43 46 33 38 42 41 33 33 32 37 45 33 30 30 31 Data Ascii: F8068F806EE3532541 $127E803888D82F33CC3C311ECC6CCEB7708831CB $130CFCF38BA3327E3001A1DB2A4B5ACBDAE248D9 $13CADC9E09F30AF24A98B44E88323DB655A803E9 $13FBC97516DC854399E70BC7CA9A4513FFD4F08C $140E4FC6202FE17F46337058FC9848FA9055482B $149E584199DAD
Nov 3, 2024 09:35:05.866209984 CET	1236	IN	Data Raw: 20 24 32 44 33 34 37 33 33 36 38 42 46 34 45 36 35 45 39 45 42 32 43 43 45 34 33 44 31 33 32 45 45 37 46 41 41 46 33 30 39 33 20 24 32 45 42 38 39 37 35 37 46 31 44 38 32 32 38 37 38 34 33 33 35 32 33 32 45 32 43 45 32 39 38 39 44 32 32 30 45 35 Data Ascii: $2D3473368BF4E65E9EB2CCE43D132EE7FAAF3093 $2EB89757F1D8228784335232E2CE2989D220E590 $2EC5EE348BD8D9D2E518B2CAEA9C671E2D5F77A6 $2EF3F194E34705F9E13021BAC7B394653329243A $2EFC2B8BC724CF435C14066087936BE7CA3C57A3 $30C472441D910A8BCDA571F2637C801
Nov 3, 2024 09:35:05.866223097 CET	1236	IN	Data Raw: 36 45 33 43 37 42 43 38 41 46 43 41 43 42 38 33 39 35 42 33 37 34 31 31 20 24 33 45 46 41 37 42 30 32 35 39 36 39 31 36 43 41 37 46 46 35 39 43 37 41 33 41 37 41 38 41 38 44 35 36 42 37 41 31 45 38 20 24 33 46 33 38 43 31 37 43 31 31 42 34 33 35 Data Ascii: 6E3C7BC8AFCACB8395B37411 $3EFA7B02596916CA7FF59C7A3A7A8A8D56B7A1E8 $3F38C17C11B43562766B50A95366B021CBCC7ADA $3F6E66FDA54B0CED35F01A16AF5D034DDDD8D48C $409BD5AEC15BF5D2B983C6F064D852B0ADE0C8BD $410C2D96F0749813FDBBB15D079FC03BAEF6BFD1 $42708A1
Nov 3, 2024 09:35:05.866234064 CET	1236	IN	Data Raw: 46 35 41 42 36 45 20 24 35 34 36 36 32 39 39 33 36 35 31 38 32 31 34 44 43 46 43 46 37 38 34 45 38 37 35 44 30 45 42 45 35 32 45 30 35 35 32 44 20 24 35 34 36 38 37 44 35 39 46 38 43 38 44 39 30 30 35 36 43 41 39 34 38 34 39 39 37 30 42 33 36 32 Data Ascii: F5AB6E $546629936518214DCFCF784E875D0EBE52E0552D $54687D59F8C8D90056CA94849970B362DA385DAD $552C2E2AFDD1B740A38CA9768C51EC011B2AF701 $555A6B7CB3D8ECA376B4CB6701596A7B211E21D3 $56D878C942CD38F5287079974950668B18ECC4CD $5756D9C403D89B79AFE69D50B
Nov 3, 2024 09:35:05.866245031 CET	1236	IN	Data Raw: 46 39 33 35 35 38 36 37 37 43 31 45 38 43 36 31 45 37 32 34 42 44 34 36 36 43 45 38 41 30 20 24 36 34 36 42 34 45 33 39 42 34 39 46 33 30 33 42 34 42 35 35 32 41 38 46 33 43 42 42 38 46 43 44 34 30 42 45 37 45 42 35 20 24 36 34 44 39 30 39 35 39 Data Ascii: F93558677C1E8C61E724BD466CE8A0 $646B4E39B49F303B4B552A8F3CBB8FCD40BE7EB5 $64D90959E50D593D80ACD0E29A2BE9051EB66EEA $656BA6C00B21DB086611171C946288A29E2DF5BC $659B0645A1C264D9D8FF4C9DD2B08ADAC392D475 $65A398E9A697A4645937B086CDA1D9A5C57B9509 $6
Nov 3, 2024 09:35:05.866257906 CET	1236	IN	Data Raw: 45 31 31 33 31 43 44 32 41 44 30 44 20 24 37 36 34 34 42 35 37 44 44 38 36 33 30 35 46 33 42 38 31 37 32 46 45 46 36 43 45 45 38 35 38 36 34 44 30 38 38 42 41 37 20 24 37 36 42 41 43 43 39 30 43 42 41 37 31 37 31 34 39 31 38 35 35 34 31 35 36 43 Data Ascii: E1131CD2AD0D $7644B57DD86305F3B8172FEF6CEE85864D088BA7 $76BACC90CBA71714918554156CAABE955E7A940F $76CA419C68502FFC4D950D167E25EE0AD3A0A764 $77313C32AA48AB658299DA039DF6C627C126F570 $77D53F8C9545D1E6A4D3532E9E2D8474460933B9 $799F36F3EAD423C23E7
Nov 3, 2024 09:35:05.866270065 CET	1236	IN	Data Raw: 35 34 32 31 34 42 44 36 31 35 31 46 30 34 32 37 44 34 41 31 35 38 45 37 31 44 36 32 45 32 31 45 30 37 36 36 20 24 38 44 34 36 33 39 46 31 33 35 43 39 30 38 45 42 39 33 42 34 32 32 34 42 41 37 31 39 31 38 34 45 41 41 31 45 36 44 30 35 20 24 38 45 Data Ascii: 54214BD6151F0427D4A158E71D62E21E0766 $8D4639F135C908EB93B4224BA719184EAA1E6D05 $8E22D75D49EFBBEA1D719976D5A78750B2C0C227 $8E477758547F612659BD2864C91D641452833369 $8EAE810FA33F26341605D59F82D8AD58F7EA6CC5 $8EEDA34CE6D6E605ED3179278F45882654923
Nov 3, 2024 09:35:05.873269081 CET	1236	IN	Data Raw: 44 33 39 35 32 35 45 33 37 37 37 35 45 41 31 45 45 42 20 24 41 31 35 36 37 36 46 35 46 30 46 32 42 41 37 42 31 43 41 35 34 34 34 36 44 44 42 34 36 42 45 45 36 46 36 39 39 41 39 35 20 24 41 31 41 42 31 33 34 31 32 33 46 39 46 35 33 34 43 37 45 30 Data Ascii: D39525E37775EA1EEB $A15676F5F0F2BA7B1CA54446DDB46BEE6F699A95 $A1AB134123F9F534C7E09B6841A7ECAFD0282240 $A1F57EBAAC183C6B0A49E62E5B23E8C1BB6C1022 $A4F42AE65F11634C42A3F3952E719F47091BD36F $A5BBC2C61B1F6B09097011C4CE56BBE57DE5AC92 $A6191F3949C33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49709	45.66.35.11	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:07.270397902 CET	172	OUT	GET /tor/server/fp/f6691e3eb7cab3c876aaa885e6801b63dc998c39 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:08.330945969 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:08 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:08 GMT Data Raw: 72 6f 75 74 65 72 20 61 6e 6f 74 68 65 72 52 65 6c 61 79 20 31 34 34 2e 32 31 37 2e 34 2e 31 36 36 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 62 75 41 53 67 49 61 61 30 54 44 65 54 76 55 72 4c 52 79 7a 48 67 2b 49 44 63 56 48 2f 78 38 64 63 64 35 72 31 47 72 52 43 56 6f 6e 54 77 41 51 41 67 42 41 44 79 33 69 54 62 0a 51 39 35 62 78 63 4d 43 63 6e 55 59 42 49 54 50 71 32 50 42 6c 4b 4f 65 59 67 75 58 65 64 5a 64 69 77 50 7a 30 58 4b 44 62 43 33 6a 68 44 66 30 36 31 38 49 6a 52 6b 56 6d 55 48 6b 7a 61 69 37 0a 52 31 4c 67 31 41 39 75 68 53 49 6c 4e 4d 53 4f 35 4a 32 7a 70 61 4d 49 38 76 34 4d 74 35 51 48 4e 32 71 75 6b 48 43 6a 66 71 69 4d 36 64 44 74 59 49 2f 75 71 45 4b 52 47 41 30 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 38 74 34 6b 32 30 50 65 57 38 58 44 [TRUNCATED] Data Ascii: router anotherRelay 144.217.4.166 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1buASgIaa0TDeTvUrLRyzHg+IDcVH/x8dcd5r1GrRCVonTwAQAgBADy3iTbQ95bxcMCcnUYBITPq2PBlKOeYguXedZdiwPz0XKDbC3jhDf0618IjRkVmUHkzai7R1Lg1A9uhSIlNMSO5J2zpaMI8v4Mt5QHN2qukHCjfqiM6dDtYI/uqEKRGA0=-----END ED25519 CERT-----master-key-ed25519 8t4k20PeW8XDAnJ1GASEz6tjwZSjnmILl3nWXYsD89Eplatform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 04:16:16fingerprint F669 1E3E B7CA B3C8 76AA A885 E680 1B63 DC99 8C39uptime 324014bandwidth 6553600 1073741824 6451818extra-info-digest CCA981DC085D6C1FC5236A4EF241A430393685FA VJQStQ8W18iOJQAEo8FBEo3CF/SjJBwruu0YUEbkgUsonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMx84DrPEhEN9SsmEJ9JtsJnpicwXs5wKLu0Y19dLjQMfRiZ4aidXxxJRciyOSzJD48ScKaZsYCPquRJER9cd6BzOU1oyua58Fegpep4WMlJOIP9HvTHKRwtNlFnf3tus5wuHiy6OT32vovW8QQPNETN7a7//Oml13RBVnHww [TRUNCATED]
Nov 3, 2024 09:35:08.330969095 CET	1236	IN	Data Raw: 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4f 46 66 65 63 76 71 5a 53 63 5a 49 53 47 56 48 55 42 6e 77 33 69 62 73 64 71 43 35 38 Data Ascii: signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOFfecvqZScZISGVHUBnw3ibsdqC58ufP2bJgoLSYJgwWt8PJoQWIbeJ5238qAiCHC+I5Fy/Nc2yhT2a6gaUMaa1X8yY+hsDtnkUnBhEOqBXysqTUYkhiJOfip08p0ILI2CEvIi2IMeOgxJbeWXeY3pGF2jjD3Kcqukk2phQuD2VAgMBAAE=-----END
Nov 3, 2024 09:35:08.330980062 CET	3	IN	Data Raw: 2d 2d 0a Data Ascii: --

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49710	45.66.35.11	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:08.711783886 CET	172	OUT	GET /tor/server/fp/6b4acb7319facb2949d4eb81f73c4decdcd2dfb5 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49711	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:09.770296097 CET	175	OUT	GET /tor/server/fp/6b4acb7319facb2949d4eb81f73c4decdcd2dfb5 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:10.536562920 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:10 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:10 GMT Data Raw: 72 6f 75 74 65 72 20 6f 72 63 61 20 31 30 39 2e 37 30 2e 31 30 30 2e 36 39 20 39 30 30 32 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 74 56 41 51 64 71 66 6e 55 2b 70 59 41 41 44 38 33 43 50 36 7a 4b 73 44 41 6e 57 70 56 54 74 74 58 2f 6a 71 42 75 6a 66 6f 4c 44 6c 73 6e 41 51 41 67 42 41 42 43 73 50 51 36 0a 68 35 77 65 6f 55 79 76 4b 4f 2b 6b 35 79 6d 59 6c 47 50 4a 35 50 6c 53 6b 4b 31 59 31 65 33 79 4b 48 6c 35 2b 37 49 67 32 70 47 76 6d 72 70 70 54 68 43 4c 59 52 77 56 49 72 6a 64 57 51 42 53 0a 64 58 54 58 4d 64 46 49 32 39 53 75 65 57 2f 55 49 4d 33 6d 67 33 6a 43 5a 59 4c 50 51 6b 64 42 67 54 6f 2b 57 42 54 7a 64 44 30 62 63 71 70 59 58 56 63 4d 48 72 61 66 2b 41 77 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 51 72 44 30 4f 6f 65 63 48 71 46 4d 72 79 6a 76 70 4f 63 70 [TRUNCATED] Data Ascii: router orca 109.70.100.69 9002 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1tVAQdqfnU+pYAAD83CP6zKsDAnWpVTttX/jqBujfoLDlsnAQAgBABCsPQ6h5weoUyvKO+k5ymYlGPJ5PlSkK1Y1e3yKHl5+7Ig2pGvmrppThCLYRwVIrjdWQBSdXTXMdFI29SueW/UIM3mg3jCZYLPQkdBgTo+WBTzdD0bcqpYXVcMHraf+Aw=-----END ED25519 CERT-----master-key-ed25519 QrD0OoecHqFMryjvpOcpmJRjyeT5UpCtWNXt8ih5efsor-address [2a03:e600:100::69]:9002platform Tor 0.4.9.0-alpha-dev on Linuxproto Conflux=1 Cons=1-2 Desc=1-3 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-3 Padding=2 Relay=2-4published 2024-11-03 04:40:37fingerprint 6B4A CB73 19FA CB29 49D4 EB81 F73C 4DEC DCD2 DFB5uptime 2545740bandwidth 1073741824 1073741824 14046441extra-info-digest 3DA608BF2D53327425EEACB894E1DB260A3CF7D2 8WcIaH01PCs6D+jMsaa44upgANRaDVohf9xDaO4ycdMonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALU6qObBvAGHtyPMpLWxzh8erd63kNVVKNBnEWjZpsMlTse6IjDvenJFrDCBH0DQfNE7Pq5yIsZnpDXNNQiTENLO3hv7SudluEdrhPfoZjrY1qPqdUSWY3MDxGcH+1r [TRUNCATED]
Nov 3, 2024 09:35:10.536593914 CET	1236	IN	Data Raw: 2f 79 47 78 76 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d Data Ascii: /yGxvAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMxyvM6pF6aQiq5DiZ7PSLX4vKXat5fVQN94Gf3zzznTYoHx+tYzLP1vPs2rd29AWi04ztLJraAXAe4cBtzd7Ag4+XEdzrSICPZkATHthPbPD4k94iLdiQVcq0cIR5IudRh5FyC+7b88lP+cDNq
Nov 3, 2024 09:35:10.536611080 CET	1236	IN	Data Raw: 46 34 41 37 44 36 33 36 42 20 24 31 35 37 44 33 42 42 37 39 44 30 38 42 43 36 36 39 42 46 46 37 34 35 41 31 45 30 31 38 32 35 46 36 45 33 43 38 37 42 41 20 24 31 38 39 33 30 34 31 42 38 36 46 43 45 44 31 41 32 43 45 32 46 39 45 32 43 35 39 38 37 Data Ascii: F4A7D636B $157D3BB79D08BC669BFF745A1E01825F6E3C87BA $1893041B86FCED1A2CE2F9E2C5987F534B7DC3E0 $1AB5E57A8356C94803B9199FD4A9845854E6A0AC $1CACE884480BB87CC640A51C46087F18F4ABA970 $1CBAA1FCC2F81ED2201D7AEB6A6FBD6D482AFD4F $20A8BC8EE8125FE6852C85
Nov 3, 2024 09:35:10.536623955 CET	1236	IN	Data Raw: 46 31 35 36 45 37 36 46 36 42 37 31 35 42 44 42 41 32 46 32 33 43 46 32 44 33 42 45 34 33 43 46 41 20 24 36 42 34 41 43 42 37 33 31 39 46 41 43 42 32 39 34 39 44 34 45 42 38 31 46 37 33 43 34 44 45 43 44 43 44 32 44 46 42 35 20 24 36 46 39 42 42 Data Ascii: F156E76F6B715BDBA2F23CF2D3BE43CFA $6B4ACB7319FACB2949D4EB81F73C4DECDCD2DFB5 $6F9BBCB2A3AB5A1D11BD1871621433BAC8AD9107 $72F3AC8E95AD980DC5F0FCF29FDB1CE72128729E $74FAE33B21FFFFDC6FA11384664023AC8DFDDA4C $763B7D67A6B2D19B3E9EA57D1FBDC48F3B85B559
Nov 3, 2024 09:35:10.536633968 CET	1236	IN	Data Raw: 34 42 45 34 35 39 39 33 30 35 43 45 34 37 37 20 24 42 41 44 45 43 41 42 33 44 30 31 35 32 34 43 33 30 43 39 32 35 44 39 30 36 39 37 45 36 44 34 46 32 30 34 39 33 41 37 42 20 24 42 42 45 31 44 42 46 36 30 30 39 42 36 32 36 37 41 46 42 34 44 45 46 Data Ascii: 4BE4599305CE477 $BADECAB3D01524C30C925D90697E6D4F20493A7B $BBE1DBF6009B6267AFB4DEF789F62FD9D8A940A4 $BE0AC3B6692085308CA766F9E03736D1CAAED6F3 $C104AF9A07EF37CCB62BB0484D21927FDB294770 $C282248597D1C8522A2A7525E61C8B77BBC37614 $C7CB242A0627D699
Nov 3, 2024 09:35:10.536649942 CET	164	IN	Data Raw: 33 34 45 36 38 31 41 46 38 32 32 36 44 45 42 43 39 31 33 35 41 34 38 46 36 31 44 45 46 39 46 36 38 39 36 36 42 41 35 20 24 46 35 30 42 32 38 34 41 43 32 44 45 35 41 46 32 42 33 30 34 30 39 46 30 36 44 34 46 45 37 45 38 34 45 45 45 46 39 37 44 20 Data Ascii: 34E681AF8226DEBC9135A48F61DEF9F68966BA5 $F50B284AC2DE5AF2B30409F06D4FE7E84EEEF97D $F84791FF4E1D9689B17328B5B0EE6A82B0F04A89 $FC88592136EEC2F37C3D1685E36B8B8D3EE6DC0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49713	193.23.244.244	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:12.261082888 CET	175	OUT	GET /tor/server/fp/d1a8ac50ef135075a9b43e284caab9b039622776 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49714	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:13.325973988 CET	175	OUT	GET /tor/server/fp/d1a8ac50ef135075a9b43e284caab9b039622776 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:14.083070040 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:14 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:14 GMT Data Raw: 72 6f 75 74 65 72 20 56 6f 72 74 65 78 43 68 61 73 65 72 20 31 35 34 2e 32 31 33 2e 31 38 34 2e 31 31 31 20 39 30 30 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 63 6b 41 5a 6c 64 64 79 6c 70 4d 50 52 74 53 4b 63 75 64 45 57 37 79 56 46 79 4e 4b 67 39 54 39 6b 6e 6b 77 59 4b 69 62 73 5a 52 61 55 56 41 51 41 67 42 41 42 62 41 50 69 70 0a 79 63 4d 57 6b 32 6c 69 4f 7a 53 49 34 32 74 6c 4d 4b 54 76 75 41 4a 74 31 58 6e 33 2f 79 6f 2b 4c 46 73 54 68 69 57 50 58 66 79 32 6f 72 52 72 2f 2b 57 30 36 37 78 31 55 39 67 76 62 56 4c 67 0a 73 79 6c 65 63 31 79 42 2f 2b 6b 6b 67 49 6e 4b 38 52 35 47 7a 72 42 67 4b 34 78 70 68 6a 4f 6d 34 30 37 4a 32 4b 71 33 6c 48 55 4a 70 6f 6b 64 6e 6f 71 65 70 30 33 53 65 67 77 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 57 77 44 34 71 63 6e 44 46 70 [TRUNCATED] Data Ascii: router VortexChaser 154.213.184.111 9000 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1ckAZlddylpMPRtSKcudEW7yVFyNKg9T9knkwYKibsZRaUVAQAgBABbAPipycMWk2liOzSI42tlMKTvuAJt1Xn3/yo+LFsThiWPXfy2orRr/+W067x1U9gvbVLgsylec1yB/+kkgInK8R5GzrBgK4xphjOm407J2Kq3lHUJpokdnoqep03Segw=-----END ED25519 CERT-----master-key-ed25519 WwD4qcnDFpNpYjs0iONrZTCk77gCbdV59/8qPixbE4Yor-address [2a12:dd47:8513::5]:9000platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 23:28:33fingerprint D1A8 AC50 EF13 5075 A9B4 3E28 4CAA B9B0 3962 2776uptime 453854bandwidth 1073741824 1073741824 17159776extra-info-digest 3D4029BFF1711FCFBB59216EE54AF252753A62F4 GB/IbbqpBitu8uh7w1etgzfpFnh196+NN3PA9DHFZXQonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKoB9EoUDb0sI4qdJg97aV4VsLHuJ9rCUPOib/9kNDoIDgajqAKpp4fmnK/fLwoekaUfn/GcXsmKnz1yhz+1diBCYvXG55+gePhgLRZhI/SeDuzj0K8j5wt93p9V7Qi [TRUNCATED]
Nov 3, 2024 09:35:14.083087921 CET	764	IN	Data Raw: 4a 6e 6a 57 64 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d Data Ascii: JnjWdAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALR1+/GCGNM1Eh/LE2uLTxjfFubcLwl/e78QieZo7MTHp2UWnt6Q3c4QDg02dpU5fnLC/Ed1c9u5tyEFQOgpt+ZGZyAlikzHe35q8JFA5xN7Bw2UUiCWWelAnJL42ewq6Dr+wYjK68B6P4wXjkt
Nov 3, 2024 09:35:14.083162069 CET	1018	IN	Data Raw: 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 31 43 32 35 30 41 34 38 38 30 32 42 39 36 45 45 43 34 45 31 45 38 32 39 44 34 30 41 42 43 31 33 45 32 42 31 38 37 43 45 20 24 44 31 41 38 41 43 35 30 45 46 31 33 35 30 37 35 41 39 42 Data Ascii: 19 CERT-----family $1C250A48802B96EEC4E1E829D40ABC13E2B187CE $D1A8AC50EF135075A9B43E284CAAB9B039622776hidden-service-dircontact relays@@@fuppurge dot infontor-onion-key TBKmRxmAYXOLrSxBzAlDpB3DCoeTeYk11QxrKXmD4lUreject 0.0.0.0/8:*reject

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49717	45.66.35.11	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:15.074098110 CET	172	OUT	GET /tor/server/fp/70b52cf2b31f63c2ee07e773eea8b760fc717ba9 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49719	193.23.244.244	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:16.130069017 CET	175	OUT	GET /tor/server/fp/70b52cf2b31f63c2ee07e773eea8b760fc717ba9 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49722	45.66.35.11	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:17.205482960 CET	172	OUT	GET /tor/server/fp/70b52cf2b31f63c2ee07e773eea8b760fc717ba9 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:18.244585991 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:18 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:18 GMT Data Raw: 72 6f 75 74 65 72 20 67 67 72 6f 6c 61 6e 64 20 31 38 35 2e 31 34 31 2e 35 36 2e 32 37 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 59 4d 41 59 30 6e 43 2b 4a 36 2b 75 41 6e 54 72 70 48 4b 50 71 4f 2b 37 49 70 68 41 6c 57 30 6c 7a 58 54 78 51 59 36 43 67 46 6d 2f 2f 71 41 51 41 67 42 41 41 68 72 2f 4e 50 0a 6f 2b 4b 2b 71 6a 62 69 67 6a 59 70 67 72 6f 76 52 65 5a 73 76 49 6d 54 45 41 4d 39 65 32 33 35 57 4c 6c 4f 6a 55 6f 55 4b 4b 49 75 46 59 36 4d 4e 78 55 55 64 4e 70 78 6d 46 31 44 5a 6c 51 63 0a 78 58 5a 43 39 48 71 68 41 58 57 41 46 4f 57 66 71 31 69 36 41 44 46 6d 74 35 36 75 49 46 74 65 4f 55 6c 2b 45 75 32 47 31 6f 53 72 76 57 57 49 4d 35 64 45 53 42 4f 68 46 51 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 49 61 2f 7a 54 36 50 69 76 71 6f 32 34 6f 49 32 [TRUNCATED] Data Ascii: router ggroland 185.141.56.27 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1YMAY0nC+J6+uAnTrpHKPqO+7IphAlW0lzXTxQY6CgFm//qAQAgBAAhr/NPo+K+qjbigjYpgrovReZsvImTEAM9e235WLlOjUoUKKIuFY6MNxUUdNpxmF1DZlQcxXZC9HqhAXWAFOWfq1i6ADFmt56uIFteOUl+Eu2G1oSrvWWIM5dESBOhFQ4=-----END ED25519 CERT-----master-key-ed25519 Ia/zT6Pivqo24oI2KYK6L0XmbLyJkxADPXtt+Vi5To0platform Tor 0.4.8.10 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 05:44:55fingerprint 70B5 2CF2 B31F 63C2 EE07 E773 EEA8 B760 FC71 7BA9uptime 17453046bandwidth 1073741824 1073741824 68127398extra-info-digest 602EC14DB8ED53524B4A37D3492E26825D7E92EE tc+3J17CjXipPn+v2IDU5Wzs79pqt+i05GIBgjG28moonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMz32XzxgA+l0G5R6d5E9TXDPiYpGJt2U0p5+FGXj/WFv03YrItXKb4mmQnEu1tpHVJ+Nj9Up3MSswn3zf+1m5/lKi4mB0dT9YRzZJGfMPAmDX2r1l4mLirXlaPiYut0kzj0jS1pZ/UKI90hiNnHQgXT8FrTxC9hinhKs3m [TRUNCATED]
Nov 3, 2024 09:35:18.244601965 CET	1236	IN	Data Raw: 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 4f 6f 36 7a 76 7a 4f 66 58 5a 34 43 4c 66 63 4c 67 37 6d 45 4f 72 4f 30 39 48 Data Ascii: --signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKOo6zvzOfXZ4CLfcLg7mEOrO09HnGLQZxKVcTt5Vx0VHQ627Ngc3A+vvV8237LOJ6urStXRNeAb0Ozr4gziJDJJUIHfCu6qH+1/opTsUoLle6JDji8nRgztn9Yo/cTze9mOEz8YQUekwY+i8CtfhQVAuT3ewuqLhhJMXI+i8NtBAgMBAAE=-----E
Nov 3, 2024 09:35:18.244611979 CET	161	IN	Data Raw: 49 44 68 33 64 64 76 66 4b 48 7a 6e 71 79 75 52 78 33 39 76 49 42 2b 6f 73 2b 0a 46 4f 67 43 74 35 69 54 74 51 6c 56 6a 6d 39 48 75 69 7a 4b 59 54 4a 49 42 2f 73 62 53 37 4b 4e 79 74 5a 6e 6d 47 45 4f 66 5a 33 43 32 2b 32 53 45 44 79 6a 67 30 75 Data Ascii: IDh3ddvfKHznqyuRx39vIB+os+FOgCt5iTtQlVjm9HuizKYTJIB/sbS7KNytZnmGEOfZ3C2+2SEDyjg0ufPgBtdfL4hRxjSP7+COrAu0dwiMEnRiIGH1XzLHrGxdAzouwj1W4=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49725	45.66.35.11	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:18.700902939 CET	172	OUT	GET /tor/server/fp/3ca0d15567024d2e0b557dc0cf3e962b37999a79 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49727	216.218.219.41	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:19.786501884 CET	175	OUT	GET /tor/server/fp/3ca0d15567024d2e0b557dc0cf3e962b37999a79 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:20.546335936 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:20 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:20 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 69 6e 74 65 78 41 69 72 56 50 4e 33 30 20 32 30 34 2e 38 2e 39 36 2e 38 33 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 62 74 41 56 62 6e 75 71 6f 76 69 43 45 54 68 42 7a 59 6a 57 75 43 36 51 2f 35 49 75 55 6b 72 2b 4d 39 51 76 4e 2f 6f 75 69 53 44 53 30 35 41 51 41 67 42 41 43 59 30 76 53 4f 0a 6f 52 4d 74 55 78 57 59 62 5a 49 73 4a 6f 32 6c 39 30 52 43 55 62 4b 2b 64 6f 54 31 36 2f 77 46 42 7a 30 6b 72 59 43 6e 4e 53 42 71 74 6d 78 67 72 48 79 58 59 5a 36 6a 32 37 75 79 50 4c 6c 44 0a 69 38 75 66 32 79 6f 4c 42 42 74 74 73 71 4e 6d 55 71 79 77 6e 39 49 49 36 34 62 47 79 52 36 62 78 49 46 78 77 75 48 4a 61 4a 73 69 49 48 57 4a 75 72 4a 64 59 50 32 56 44 77 73 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6d 4e 4c 30 6a 71 45 54 4c 56 4d 56 [TRUNCATED] Data Ascii: router QuintexAirVPN30 204.8.96.83 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1btAVbnuqoviCEThBzYjWuC6Q/5IuUkr+M9QvN/ouiSDS05AQAgBACY0vSOoRMtUxWYbZIsJo2l90RCUbK+doT16/wFBz0krYCnNSBqtmxgrHyXYZ6j27uyPLlDi8uf2yoLBBttsqNmUqywn9II64bGyR6bxIFxwuHJaJsiIHWJurJdYP2VDws=-----END ED25519 CERT-----master-key-ed25519 mNL0jqETLVMVmG2SLCaNpfdEQlGyvnaE9ev8BQc9JK0or-address [2620:7:6001::ffff:c759:e653]:80platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 06:57:42fingerprint 3CA0 D155 6702 4D2E 0B55 7DC0 CF3E 962B 3799 9A79uptime 129610bandwidth 1073741824 1073741824 8969216extra-info-digest 600A6CC2C517D4C5DF7782BB5BA72BF45A09FBEE MQkzaSkHzh7YXWV8JxBjZ+CEbHUPFruRjnFYuOEqCxIonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALZbtO4pt2SLbF8fHWqJCwtHspzSxCraWzDELXh6HXfUzwi7jK8RKeG87MTD5XjWJUOltiWy5IsBqy+eO9ESvDJDEpqWKGM+oeLm2P6w+SbBVKHad3tcqb2hRt [TRUNCATED]
Nov 3, 2024 09:35:20.546358109 CET	1236	IN	Data Raw: 6c 2b 46 6f 52 46 76 34 78 50 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 Data Ascii: l+FoRFv4xPAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMHlMQ75Y7091vYhU7NsT5VEmIOMSfNIb8oZUfHM9lJ36vNAFSoG+VKl7gtZqqa8FqYlnRU+eXUWwZgJmUf+bsQzOdek/GVMqH37KsYdirD6G1yJ7Cnopd+I4l/Cbb2R0f39y93IYAGPrL
Nov 3, 2024 09:35:20.546370983 CET	1236	IN	Data Raw: 41 44 42 30 42 41 36 32 35 38 37 45 45 36 20 24 32 31 31 38 37 44 44 44 35 35 32 36 30 35 39 35 37 42 32 45 45 35 41 42 43 42 44 41 30 45 31 39 32 35 31 32 39 33 45 44 20 24 32 45 44 34 44 32 35 37 36 36 39 37 33 37 31 33 45 42 38 43 35 36 41 32 Data Ascii: ADB0BA62587EE6 $21187DDD552605957B2EE5ABCBDA0E19251293ED $2ED4D25766973713EB8C56A290BF07E06B85BF12 $2F81DA22A649EBB0CCD20A97527207E2E841F5F6 $30C55C496F5C7B9868E0BC6349A1CD5623F0B75F $320D73AF6CC78987E710789847BFB8D61C31BD4B $3268B4C7DC8D31C30
Nov 3, 2024 09:35:20.546381950 CET	1188	IN	Data Raw: 30 34 36 43 45 41 35 30 30 39 32 46 39 41 42 32 46 37 31 32 44 38 34 46 35 32 45 38 46 41 30 30 44 38 33 38 37 37 20 24 37 45 36 45 39 41 36 46 44 44 42 38 44 43 37 43 39 32 46 30 43 46 43 43 33 43 42 45 37 36 43 32 39 46 30 36 31 37 39 39 20 24 Data Ascii: 046CEA50092F9AB2F712D84F52E8FA00D83877 $7E6E9A6FDDB8DC7C92F0CFCC3CBE76C29F061799 $7FA8E7E44F1392A4E40FFC3B69DB3B00091B7FD3 $891F75C9EA906010BE9097D9573F72F462D88A19 $8A63E4CC86E4AFF54E07AF9D2340DFDFB8674312 $8B80169BEF71450FC4069A190853523B7AE
Nov 3, 2024 09:35:20.546394110 CET	1236	IN	Data Raw: 33 39 30 31 31 43 41 38 34 45 35 43 42 32 41 38 45 33 35 34 33 30 36 36 44 30 20 24 42 37 45 43 44 39 43 36 41 39 31 30 41 31 37 30 42 35 35 31 36 35 37 34 32 30 34 39 43 42 43 43 37 37 37 34 39 34 46 32 20 24 43 35 41 35 33 42 43 43 31 37 34 45 Data Ascii: 39011CA84E5CB2A8E3543066D0 $B7ECD9C6A910A170B55165742049CBCC777494F2 $C5A53BCC174EF8FD0DCB223E4AA929FA557DEDB2 $C78AFFEEE320EA0F860961763E613FD2FAC855F5 $CB7C0D841FE376EF43F7845FF201B0290C0A239E $CC14C97F1D23EE97766828FC8ED8582E21E11665 $CC4A3
Nov 3, 2024 09:35:20.546406031 CET	1236	IN	Data Raw: 35 30 35 45 44 30 36 44 20 24 46 44 44 37 30 30 43 37 39 31 43 43 36 42 42 30 41 43 31 43 32 30 39 39 41 38 32 43 42 43 33 36 37 41 44 34 42 37 36 34 20 24 46 45 30 30 41 33 41 38 33 35 36 38 30 45 36 37 46 42 42 43 38 39 35 41 37 32 34 45 32 36 Data Ascii: 505ED06D $FDD700C791CC6BB0AC1C2099A82CBC367AD4B764 $FE00A3A835680E67FBBC895A724E2657BB253E97hidden-service-dircontact email:john[]quintex.com url:https://www.quintex.com proof:uri-rsa abuse:john[]quintex.com keybase:aquintex twitter:aquintex
Nov 3, 2024 09:35:20.546416998 CET	66	IN	Data Raw: 39 52 75 49 58 47 71 56 63 4b 7a 65 71 6a 42 34 46 65 7a 46 6d 78 4c 6a 34 4c 46 72 45 51 4c 48 56 4e 37 54 51 4b 56 59 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 53 49 47 4e 41 54 55 52 45 2d 2d 2d 2d 2d 0a Data Ascii: 9RuIXGqVcKzeqjB4FezFmxLj4LFrEQLHVN7TQKVY=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49740	45.66.35.11	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:21.690850973 CET	172	OUT	GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49746	193.23.244.244	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:22.747339010 CET	175	OUT	GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49747	45.66.35.11	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:23.338165998 CET	172	OUT	GET /tor/server/fp/885c7b6eb943068b762070e276e299319e5ab08c HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:24.381685972 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:24 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:24 GMT Data Raw: 72 6f 75 74 65 72 20 49 4e 53 52 65 6c 61 79 31 39 61 74 38 34 34 33 20 31 34 30 2e 37 38 2e 31 30 30 2e 31 39 20 38 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 63 6a 41 64 4d 77 75 77 6e 70 38 71 32 79 55 35 43 74 70 35 71 71 7a 6b 66 55 59 53 43 35 6a 76 79 4f 47 6f 42 78 64 54 61 58 49 4c 48 50 41 51 41 67 42 41 41 4f 68 31 49 68 0a 6a 69 4d 6f 57 6d 6d 51 39 6c 4d 31 6f 42 5a 57 4c 68 31 44 38 6f 74 67 44 37 7a 34 4c 4b 41 4c 57 44 6e 37 38 58 4a 6b 4a 71 6e 33 77 45 6c 33 2f 77 31 72 4e 56 38 59 43 30 35 58 4e 63 4f 45 0a 76 6e 6d 47 56 70 37 68 6b 36 58 2f 42 35 38 74 39 49 36 62 32 63 46 39 42 68 31 79 4a 79 57 33 42 61 50 43 62 62 64 72 69 54 65 70 53 4a 35 43 33 56 6c 77 64 36 5a 66 4f 41 77 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 44 6f 64 53 49 59 34 6a [TRUNCATED] Data Ascii: router INSRelay19at8443 140.78.100.19 8443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1cjAdMwuwnp8q2yU5Ctp5qqzkfUYSC5jvyOGoBxdTaXILHPAQAgBAAOh1IhjiMoWmmQ9lM1oBZWLh1D8otgD7z4LKALWDn78XJkJqn3wEl3/w1rNV8YC05XNcOEvnmGVp7hk6X/B58t9I6b2cF9Bh1yJyW3BaPCbbdriTepSJ5C3Vlwd6ZfOAw=-----END ED25519 CERT-----master-key-ed25519 DodSIY4jKFppkPZTNaAWVi4dQ/KLYA+8+CygC1g5+/Eplatform Tor 0.4.8.0-alpha-dev on Linuxproto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 20:54:24fingerprint 885C 7B6E B943 068B 7620 70E2 76E2 9931 9E5A B08Cuptime 16120838bandwidth 107520 1073741824 7431980extra-info-digest F108937D1F6E4AC00992DD8FE849984082C57A84 Ww3YVpz9KW2Zxvc5CavwcshMGv9bax2uqOjTQSxavm4onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMcNvfTzotpVJiKvBl0NyYQ9RWmin2un8NdrJs14YHoLRU9Urmn1T46Rl0OBjfUGtLl4eVvcT8GMqlhk6g5Q7+vyVu+//rcsF54u9XIb0Sw2PItBfXXZw460/tQqYry8i/qJVX+9ZwuxjleONEPEyP9N48a/HkE+jC+rv [TRUNCATED]
Nov 3, 2024 09:35:24.381724119 CET	1236	IN	Data Raw: 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 46 54 74 4a 7a 35 47 74 2f 48 6f 62 4b 64 4b 32 33 56 2f 33 56 4e 30 53 Data Ascii: ----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALFTtJz5Gt/HobKdK23V/3VN0ScsDpxy9LiWZN6Z2EXWwY4oAEqLId++Zv2Po4ZJxFx2Xx2t9xblXHUEC6Q8DGcghXQMdvSWo+7pKA7SFqH6KLHtKbDsc9N00SffWRWmbDdgHs/K3uxiaA4wmKqxYjvDRNj26FPPMjk0mvY577cVAgMBAAE=----
Nov 3, 2024 09:35:24.381736994 CET	1236	IN	Data Raw: 39 31 31 42 31 30 32 44 30 36 35 46 38 20 24 36 35 36 39 44 37 36 32 41 43 34 34 38 31 32 37 36 36 34 37 35 30 42 30 38 39 46 38 30 44 31 35 39 37 45 43 42 37 30 39 20 24 36 39 44 37 46 45 46 39 42 30 30 32 36 33 39 33 43 32 46 44 37 33 45 38 39 Data Ascii: 911B102D065F8 $6569D762AC448127664750B089F80D1597ECB709 $69D7FEF9B0026393C2FD73E897C71C102ABACA5C $6E3508CB2374D411CD41FEE8ECDF70DA3A2F7A28 $6FB68261B9CDD76CD5195A574D4FF561A2CC0204 $70882B116C73BE323036D824315A050EE796C445 $70B2D83BFCA9502E37
Nov 3, 2024 09:35:24.381757021 CET	1126	IN	Data Raw: 32 35 38 37 32 45 33 41 41 39 32 36 34 30 32 44 38 39 39 38 30 38 35 41 34 30 39 43 37 42 42 44 46 41 45 35 39 20 24 43 42 32 45 43 38 44 38 30 36 32 34 43 41 36 44 44 35 30 39 32 45 31 41 37 39 34 44 45 41 34 38 38 41 38 31 42 35 30 41 20 24 43 Data Ascii: 25872E3AA926402D8998085A409C7BBDFAE59 $CB2EC8D80624CA6DD5092E1A794DEA488A81B50A $CFB535715442BC0E9F6AF224A794BBFA02D0B343 $D6015DEF7073A550DB4E797C76A71F35D28468A2 $DC5BACF269EFDC7FE91356F2A98ADDAA49BD82EC $DE879EBAF50B900E1940A97B048293006874

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49753	193.23.244.244	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:23.808962107 CET	175	OUT	GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49758	216.218.219.41	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:24.840737104 CET	175	OUT	GET /tor/server/fp/7f26c39059d60e2eef1bcb9a8e7adf7500563c07 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:25.619549990 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:25 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:25 GMT Data Raw: 72 6f 75 74 65 72 20 49 6e 74 65 72 6c 61 6b 65 6e 20 34 35 2e 39 35 2e 31 36 39 2e 32 32 34 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 69 49 41 53 2b 67 36 61 7a 65 4d 61 6b 62 36 68 6f 59 45 6e 4b 57 76 46 49 6e 4e 51 70 62 58 68 67 36 33 72 6e 34 56 51 6f 77 32 7a 49 44 41 51 41 67 42 41 44 56 35 36 68 55 0a 7a 7a 35 6e 33 6f 50 78 39 44 53 32 65 79 73 47 42 33 49 66 30 77 4a 6f 2f 79 47 53 51 6e 4e 4b 64 7a 45 65 49 58 43 35 51 47 54 66 39 6a 63 41 52 4f 48 55 55 53 5a 4d 61 70 6c 35 32 78 46 54 0a 7a 37 72 67 46 54 6c 41 38 4a 62 34 6b 4e 2f 43 38 75 69 56 72 53 37 52 49 4b 59 32 36 36 57 54 4b 4c 44 67 70 4e 79 75 41 49 37 37 65 35 5a 4a 35 71 33 63 35 4c 31 39 33 77 63 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 31 65 65 6f 56 4d 38 2b 5a 39 36 44 38 66 51 [TRUNCATED] Data Ascii: router Interlaken 45.95.169.224 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1iIAS+g6azeMakb6hoYEnKWvFInNQpbXhg63rn4VQow2zIDAQAgBADV56hUzz5n3oPx9DS2eysGB3If0wJo/yGSQnNKdzEeIXC5QGTf9jcAROHUUSZMapl52xFTz7rgFTlA8Jb4kN/C8uiVrS7RIKY266WTKLDgpNyuAI77e5ZJ5q3c5L193wc=-----END ED25519 CERT-----master-key-ed25519 1eeoVM8+Z96D8fQ0tnsrBgdyH9MCaP8hkkJzSncxHiEplatform Tor 0.4.8.10 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 04:31:31fingerprint 7F26 C390 59D6 0E2E EF1B CB9A 8E7A DF75 0056 3C07uptime 5857714bandwidth 104857600 104857600 20804012extra-info-digest FFEB89A87A1328AEB21D43B157E9149267610839 As4EcywIYfOG+ETvuKh6R2P+HZQ4ZljVyFBqtG26S4konion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALp3Pzs1P3XgPw9+QQ0KQmrpYPTEjLw9mEBjq6f24KKuPOQrrCiPj7Z8nuXuoX7GI7dARYJh0cOo3YUQLykdGB7I2jkcmggHTshkC7415khKOca6BYALyWkNWAOOgkwnu5ZZcBlyKIqyrLVVTGQFiaJcXARFMz6hVVtqj8vM2 [TRUNCATED]
Nov 3, 2024 09:35:25.619565964 CET	1236	IN	Data Raw: 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4c 56 4a 72 6b 30 77 35 59 46 4e 54 38 77 69 34 43 64 50 4d 73 50 56 55 7a 45 43 76 54 Data Ascii: signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALVJrk0w5YFNT8wi4CdPMsPVUzECvTyjdRuhSznaL0eOMEgTUYoAPaHR2o5CpdHUf1M3FnpVF13c0qaWkBQwOeB8aACiC1+Gv31+rI06K0OywjOU9R1R6unFZiVViG/VbFQk23ERJVUPAKt/IDJ6wSmhTjAqtrA7ok08iI2KCVyJAgMBAAE=-----END
Nov 3, 2024 09:35:25.619577885 CET	948	IN	Data Raw: 46 43 41 39 42 32 38 34 43 20 24 42 33 44 41 36 44 30 46 34 43 35 43 36 37 45 31 41 45 38 45 34 44 46 32 30 43 38 33 32 36 32 32 41 33 46 45 32 42 37 36 20 24 42 41 38 39 41 45 37 41 46 34 32 46 31 35 33 45 30 38 34 42 35 39 35 39 37 45 45 41 35 Data Ascii: FCA9B284C $B3DA6D0F4C5C67E1AE8E4DF20C832622A3FE2B76 $BA89AE7AF42F153E084B59597EEA58F43D970B13 $E412577E65E110F8AEC625FD5872339977477FA6 $FD0B7CC5CAF13828CC35F9ED901AADCE76093399 $FE576B7351D5036A3304982D5DCFFA4009940845 $FE9FA43C473E4597A734AB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49760	193.23.244.244	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:25.177133083 CET	175	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49766	216.218.219.41	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:26.236011028 CET	175	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:27.004302979 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:26 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:26 GMT Data Raw: 72 6f 75 74 65 72 20 50 79 6f 74 72 54 6f 72 70 6f 74 6b 69 6e 4f 6e 65 20 31 34 39 2e 35 36 2e 34 35 2e 32 30 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 63 44 41 53 35 6c 54 32 78 68 6b 77 32 58 77 78 6e 4f 4d 5a 34 4a 36 51 33 4c 50 43 52 57 42 58 57 76 6f 6d 77 31 69 59 70 34 6a 63 38 59 41 51 41 67 42 41 43 48 36 2b 6d 43 0a 4b 4b 33 39 56 71 6d 65 53 64 4c 57 53 2f 32 6b 4b 71 77 6e 48 74 64 66 64 5a 70 61 6c 45 4d 71 35 37 4f 59 42 43 48 38 4b 44 33 45 67 75 6e 43 53 69 72 4b 56 56 59 72 69 47 49 50 6d 7a 41 79 0a 55 6a 49 7a 37 44 69 4a 61 6a 77 59 61 69 78 43 2b 57 41 41 35 68 49 50 35 50 71 53 7a 53 4d 58 78 36 4e 48 75 6f 74 78 4f 66 65 52 79 39 34 43 47 75 71 39 66 41 5a 50 6f 77 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 68 2b 76 70 67 69 69 [TRUNCATED] Data Ascii: router PyotrTorpotkinOne 149.56.45.200 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1cDAS5lT2xhkw2XwxnOMZ4J6Q3LPCRWBXWvomw1iYp4jc8YAQAgBACH6+mCKK39VqmeSdLWS/2kKqwnHtdfdZpalEMq57OYBCH8KD3EgunCSirKVVYriGIPmzAyUjIz7DiJajwYaixC+WAA5hIP5PqSzSMXx6NHuotxOfeRy94CGuq9fAZPow4=-----END ED25519 CERT-----master-key-ed25519 h+vpgiit/VapnknS1kv9pCqsJx7XX3WaWpRDKuezmAQor-address [2607:5300:201:3000::17d3]:9002platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 07:17:35fingerprint FE29 6180 0188 33AF 03A8 EACD 5894 A614 623D 3F76uptime 10761635bandwidth 1073741824 1073741824 8409924extra-info-digest 1149D3B726C580725AA23EB7E0547F72442B83AF rSLE7OmFCa2zHtjF01XE8M4YGMN2eHMdlEj01Qgvg0Uonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM5P5jLfwZXHgqKmdcBVbAKu2ZkLKp0ThmBwz/KXhlVPuch2I1o+hy278H0ohUygYg5vnrzp4DjrlvRVOyTQLuQrbS+nmepifOBzkhAv5UFhJder0y5Gd [TRUNCATED]
Nov 3, 2024 09:35:27.004323006 CET	764	IN	Data Raw: 36 6d 76 77 42 4c 76 59 79 35 67 43 62 31 2f 62 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 Data Ascii: 6mvwBLvYy5gCb1/bAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANWCEBgvk/XepUJDMN08SS8L+E523Ee2zwkgWow2MOlf2LV9AiTSAeyCs+8eaJ4JlSH0vhER9mpYL/xn7V37CDgajUGjnmoicaZoIdiohxXCfaMCcLP+E+oE5IvznP6zdkyq9NeQ
Nov 3, 2024 09:35:27.004334927 CET	841	IN	Data Raw: 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 30 31 39 46 45 42 32 32 43 45 30 34 43 42 44 30 34 38 39 42 37 46 32 34 42 45 30 33 38 35 31 38 42 36 34 46 41 32 32 33 20 24 46 45 32 39 36 31 38 30 Data Ascii: --END ED25519 CERT-----family $019FEB22CE04CBD0489B7F24BE038518B64FA223 $FE296180018833AF03A8EACD5894A614623D3F76hidden-service-dircontact email:tor[]nullvoid.me url:https://nullvoid.me proof:uri-rsa pgp:C4F31F1B8E3168DAC4394A4D45E5F8C1504C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49767	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:26.581048012 CET	175	OUT	GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49773	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:27.646631002 CET	175	OUT	GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49779	45.66.35.11	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:28.703587055 CET	172	OUT	GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:29.761580944 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:29 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:29 GMT Data Raw: 72 6f 75 74 65 72 20 48 61 70 70 79 54 6f 72 20 32 30 39 2e 31 34 31 2e 36 30 2e 32 31 39 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 67 4a 41 59 72 6d 75 79 7a 6f 41 30 2f 6c 6d 6d 64 48 51 32 66 6c 63 37 41 4b 41 49 37 6c 53 51 74 32 56 33 72 63 61 34 56 74 64 75 48 71 41 51 41 67 42 41 43 55 42 4b 54 56 0a 52 65 6d 58 2f 70 4b 64 78 32 47 6e 45 66 34 62 6d 6d 52 4f 6f 48 31 4e 35 4a 4b 71 4e 65 4e 33 57 2b 6e 43 49 65 50 4e 37 47 72 38 2f 65 32 70 6d 71 2f 53 35 78 35 55 54 71 41 51 78 37 2f 75 0a 57 74 58 76 69 39 4d 33 47 79 36 48 37 67 32 4b 5a 55 51 6f 66 33 59 77 63 63 33 2b 61 37 6b 62 37 4e 79 4e 59 31 4c 33 6e 53 4b 79 30 37 37 32 75 68 42 35 37 54 4b 48 66 51 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6c 41 53 6b 31 55 58 70 6c 2f 36 53 6e 63 64 [TRUNCATED] Data Ascii: router HappyTor 209.141.60.219 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1gJAYrmuyzoA0/lmmdHQ2flc7AKAI7lSQt2V3rca4VtduHqAQAgBACUBKTVRemX/pKdx2GnEf4bmmROoH1N5JKqNeN3W+nCIePN7Gr8/e2pmq/S5x5UTqAQx7/uWtXvi9M3Gy6H7g2KZUQof3Ywcc3+a7kb7NyNY1L3nSKy0772uhB57TKHfQE=-----END ED25519 CERT-----master-key-ed25519 lASk1UXpl/6SncdhpxH+G5pkTqB9TeSSqjXjd1vpwiEor-address [2605:6400:20:a28:b37e:88e9:caa1:7b9c]:9001platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 20:40:34fingerprint FE27 7F2B 34C9 0904 C1A2 D704 ED2A 46FC 0802 400Cuptime 4410101bandwidth 1073741824 1073741824 8503151extra-info-digest EAB656F26B43CE56B02390FF4076A548AB864702 PIbpAgNRXZhiaxy53c7ySSDBfpMZZDJS/MbIRb7vT3Eonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL06TyhNChZstL/n8rmtdpMeHGfOTp8KHuzztwgue2YJx5hTP3+jFtVqurlj5znDZKYKu8VlXG/6jXRW4ic+6iu8FT7G75i6UawcjeoLTlFXI/xpSV [TRUNCATED]
Nov 3, 2024 09:35:29.761600971 CET	1236	IN	Data Raw: 79 4a 68 75 42 2f 54 31 50 70 2b 33 50 6f 66 37 6c 33 62 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 Data Ascii: yJhuB/T1Pp+3Pof7l3bAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMh1VmDJF2Bo2TVKuQAd0TZZdy7tI9gvgtLvLx8Zhmnf1rqGiYlgJsG/pU2iguKNcZk4ne9ZqKBuYs8ZIR7XN+v/YBZx5suXKBvUVgldMcTwrSr65TwHzwHQ7NGx29Y+nFpHm
Nov 3, 2024 09:35:29.761611938 CET	1236	IN	Data Raw: 65 70 74 20 2a 3a 34 36 34 0a 61 63 63 65 70 74 20 2a 3a 35 33 31 0a 61 63 63 65 70 74 20 2a 3a 35 34 33 2d 35 34 34 0a 61 63 63 65 70 74 20 2a 3a 35 35 34 0a 61 63 63 65 70 74 20 2a 3a 35 36 33 0a 61 63 63 65 70 74 20 2a 3a 36 33 36 0a 61 63 63 Data Ascii: ept :464accept :531accept :543-544accept :554accept :563accept :636accept :706accept :749accept :853accept :873accept :902-904accept :981accept :989-990accept :991accept :992accept :993accept :994accept :995
Nov 3, 2024 09:35:29.761626005 CET	395	IN	Data Raw: 31 2c 31 39 32 39 34 2c 31 39 36 33 38 2c 35 30 30 30 32 2c 36 34 37 33 38 0a 74 75 6e 6e 65 6c 6c 65 64 2d 64 69 72 2d 73 65 72 76 65 72 0a 72 6f 75 74 65 72 2d 73 69 67 2d 65 64 32 35 35 31 39 20 55 4f 4d 7a 52 64 48 4b 63 47 6d 30 78 36 63 73 Data Ascii: 1,19294,19638,50002,64738tunnelled-dir-serverrouter-sig-ed25519 UOMzRdHKcGm0x6csWkX2Q8mFTEStLmBnsQ6gY6+vRT8TfajsUOjEDT3PH8ix/LjAxrjNVltomzYSiWxN8QgbAArouter-signature-----BEGIN SIGNATURE-----D+SsVFqvrzxXE7rCb+SRIyL33/ihp1BEn8LCkxu5wDJvT0b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49790	193.23.244.244	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:30.551116943 CET	175	OUT	GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49796	45.66.35.11	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:31.609276056 CET	172	OUT	GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49797	45.66.35.11	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:32.500116110 CET	172	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49803	45.66.35.11	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:32.649072886 CET	172	OUT	GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:33.685583115 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:33 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:33 GMT Data Raw: 72 6f 75 74 65 72 20 46 52 45 45 57 41 59 20 33 31 2e 32 32 30 2e 37 34 2e 31 33 33 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 69 44 41 52 62 44 69 59 45 79 6d 62 75 34 4a 61 36 39 54 61 56 6f 62 70 43 45 43 42 59 65 76 33 4b 7a 32 4f 6b 49 52 48 4f 61 61 62 36 79 41 51 41 67 42 41 41 66 6f 77 46 48 0a 78 74 36 36 79 58 50 76 65 50 4c 65 34 43 4f 4e 67 6f 54 46 51 54 79 51 74 69 58 72 43 35 49 6a 4a 45 4c 72 6b 2f 54 38 4d 66 64 59 4d 6f 2f 4e 49 35 64 44 4a 32 53 59 33 65 6a 4f 79 59 66 48 0a 77 6b 76 62 66 6b 51 56 33 57 6c 52 32 41 43 6a 6e 2f 44 31 2f 41 6f 55 4f 78 43 51 7a 2f 59 35 49 55 53 6d 64 68 6b 73 57 5a 46 65 70 6d 35 43 54 4d 79 58 42 6e 65 54 36 67 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 48 36 4d 42 52 38 62 65 75 73 6c 7a 37 33 6a 79 33 [TRUNCATED] Data Ascii: router FREEWAY 31.220.74.133 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1iDARbDiYEymbu4Ja69TaVobpCECBYev3Kz2OkIRHOaab6yAQAgBAAfowFHxt66yXPvePLe4CONgoTFQTyQtiXrC5IjJELrk/T8MfdYMo/NI5dDJ2SY3ejOyYfHwkvbfkQV3WlR2ACjn/D1/AoUOxCQz/Y5IUSmdhksWZFepm5CTMyXBneT6gE=-----END ED25519 CERT-----master-key-ed25519 H6MBR8beuslz73jy3uAjjYKExUE8kLYl6wuSIyRC65Mplatform Tor 0.4.8.10 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 18:20:08fingerprint FE38 4392 C982 659A B28B 51FB 98C2 179B 5E8C E371uptime 7304799bandwidth 1073741824 1073741824 50485060extra-info-digest 18D4C29E489FE6A6D2F93F448494B997EA02C502 o1tS9GSW9Tvc75rT3ZmJqcG3SHx5041TIO3GqLzVV+sonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMowgJErPX2o8u8CntxxgRAlO3uiolfO03fGGNSbU/OmD+Q6TlOBLCTQVy51rIhg551TmcfkvDq9zHlqOj35PTwmL99PKzwd1KPPBUgUMAW1l0vOPAwuVS521+9X791HwAgTLp5Tc27r50VKQTr0yBU+WaZYO4CngxeRAKUT7 [TRUNCATED]
Nov 3, 2024 09:35:33.685610056 CET	1236	IN	Data Raw: 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 59 6c 54 79 63 32 34 52 4c 6b 77 34 35 4c 53 6f 46 6b 49 56 4d 53 36 48 41 32 47 46 Data Ascii: signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANYlTyc24RLkw45LSoFkIVMS6HA2GF+8yTOfp1pOY8STaZddPeDuHi3e9y0kGEVJFWNW4VmRzNASNZv8smiO8ugzM2qTw+XTRcjI/zWrlkOa3+86CWD0HY2OSqUEnCaT8SM8IlkVPEZGtyMObeDjdUUVYdvdIztOmSMGipdVShFHAgMBAAE=-----END
Nov 3, 2024 09:35:33.685620070 CET	113	IN	Data Raw: 4c 69 7a 61 50 6c 34 35 34 34 61 51 56 6c 70 2b 30 49 38 6b 6b 55 67 4d 6d 74 48 5a 37 45 61 72 53 63 67 78 4c 4b 33 44 58 67 4a 0a 4a 6b 43 6d 56 49 36 73 70 6b 50 33 6e 66 35 51 78 70 71 2b 74 4a 70 52 78 4e 75 59 62 56 6d 61 59 64 4f 44 6c 47 Data Ascii: LizaPl4544aQVlp+0I8kkUgMmtHZ7EarScgxLK3DXgJJkCmVI6spkP3nf5Qxpq+tJpRxNuYbVmaYdODlGDxYTg=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49804	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:33.542656898 CET	175	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49810	216.218.219.41	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:34.628664970 CET	175	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49816	193.23.244.244	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:35.163388968 CET	175	OUT	GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:36.224703074 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:36 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:36 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 34 35 2e 31 34 31 2e 32 31 35 2e 35 36 20 38 34 33 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 61 59 56 48 44 30 51 71 75 63 6c 6d 58 48 49 76 62 77 6c 64 43 45 49 59 4f 6f 36 59 6c 5a 37 50 7a 74 73 42 35 72 57 6d 30 43 65 41 51 41 67 42 41 42 59 4b 72 38 6d 0a 69 49 64 59 75 76 36 65 58 71 66 79 62 73 79 39 36 68 64 6b 57 69 51 63 37 31 51 68 55 6a 34 61 54 54 35 35 79 6b 78 45 67 66 45 36 38 6e 39 50 64 47 39 58 53 62 6c 35 2b 77 55 2f 49 50 38 43 0a 79 46 63 55 4b 56 46 37 49 6b 7a 41 42 73 6a 32 65 32 52 45 34 37 30 6a 52 6b 4c 36 77 74 63 6b 6b 71 73 58 78 4b 6a 75 39 59 70 44 76 33 63 4b 45 2f 5a 31 54 64 32 48 65 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 57 43 71 2f 4a 6f 69 48 57 4c 72 2b [TRUNCATED] Data Ascii: router Quetzalcoatl 45.141.215.56 8430 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAaYVHD0QquclmXHIvbwldCEIYOo6YlZ7PztsB5rWm0CeAQAgBABYKr8miIdYuv6eXqfybsy96hdkWiQc71QhUj4aTT55ykxEgfE68n9PdG9XSbl5+wU/IP8CyFcUKVF7IkzABsj2e2RE470jRkL6wtckkqsXxKju9YpDv3cKE/Z1Td2Hegg=-----END ED25519 CERT-----master-key-ed25519 WCq/JoiHWLr+nl6n8m7MveoXZFokHO9UIVI+Gk0+ecoor-address [2a12:a800:2:1:45:141:215:56]:8430platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:23:48fingerprint 5A7D E908 3BE6 228A 4339 55A4 649C 9865 C909 676Auptime 324066bandwidth 1073741824 1073741824 7290636extra-info-digest 865236792538F6B57AAE337CF4E02E067C9751FF sRTzbsfqZuyJF2Gvyllzvrxo4gE3M8qWYmDho/a1rO8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM7rdccbDS85i2LeGoAluJvxILf260QWFZvcDJhVdB3wS2JewPwi7rfjDRnTj5XXJc2Gm6PYCxjkByB/glW/IvbrfkQ+Y608Blbq04EEZvXwS1i/ACBgA1Ya [TRUNCATED]
Nov 3, 2024 09:35:36.224719048 CET	1236	IN	Data Raw: 48 6d 68 78 5a 5a 4d 75 71 76 51 46 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 Data Ascii: HmhxZZMuqvQFAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL14+tqxvYaTEw9V1DasHGlbNVgSjQUSkOUnZ9sFctWhskzK4lwpminq7l40C3wc0UjDRSPavBd5PLfBg7uu3yEzj3mBX5usFbk5VlshkML/4ZGEleS+6SyFQWMFqyIxTnPtEIg6rfE5
Nov 3, 2024 09:35:36.224730968 CET	1236	IN	Data Raw: 31 38 30 33 33 41 32 32 38 32 37 45 33 43 34 36 20 24 30 41 37 36 43 30 41 30 41 37 32 31 44 44 42 43 33 32 34 42 37 30 35 41 44 42 46 43 39 35 46 44 38 30 36 41 45 38 35 35 20 24 30 41 46 39 38 32 43 43 37 31 41 30 31 44 39 35 45 38 39 35 39 44 Data Ascii: 18033A22827E3C46 $0A76C0A0A721DDBC324B705ADBFC95FD806AE855 $0AF982CC71A01D95E8959D763D0EC0E5A6C61244 $0B5BC76B3BE7553B229FD3E73F26AED41C31DD19 $0B8EF5F5016926F4245350FB37914E30BF36C528 $0CD666F9C9A40A8CFB1E6B9465597A51D3A1CBF8 $0CF48696F004482
Nov 3, 2024 09:35:36.224754095 CET	1236	IN	Data Raw: 32 37 44 44 42 39 30 34 44 36 34 39 45 37 41 35 32 36 30 38 38 42 37 45 31 35 42 42 34 32 43 35 33 42 42 35 33 46 36 30 20 24 32 37 46 41 45 39 39 43 30 44 42 41 38 43 44 39 44 42 46 45 34 32 44 32 44 32 34 36 34 42 34 43 36 38 45 45 42 30 30 44 Data Ascii: 27DDB904D649E7A526088B7E15BB42C53BB53F60 $27FAE99C0DBA8CD9DBFE42D2D2464B4C68EEB00D $28E427C3E7FEB76C58901DCF1565EA44589E437C $2979E1F476F04311E5088B5C12554E8B318F8A7B $2A7FE76900BB03DEAD983EB149BC8FB2F48B137F $2B7F152EAFEF8B99ABF42FBE2ED4682F5
Nov 3, 2024 09:35:36.224770069 CET	1236	IN	Data Raw: 32 41 31 41 38 32 37 36 39 34 46 32 30 30 33 41 44 30 39 34 42 30 20 24 33 39 32 42 45 46 44 43 42 30 32 36 41 35 36 38 45 30 37 37 37 38 36 45 37 39 46 44 45 35 38 39 41 39 43 30 45 34 35 31 20 24 33 39 33 43 33 44 42 32 45 46 38 31 43 34 36 39 Data Ascii: 2A1A827694F2003AD094B0 $392BEFDCB026A568E077786E79FDE589A9C0E451 $393C3DB2EF81C469CC80A982CC31570423829099 $39CE03A66016B0D69BC6C2A1F362C628436FEF7B $3A282FE698A04D83511D526A525F2C45896454AC $3A72AE52214E2F60182D311CF68B2AC7E1E849B0 $3AD0E099E
Nov 3, 2024 09:35:36.224781990 CET	1236	IN	Data Raw: 45 43 41 34 20 24 34 43 45 34 32 32 34 34 36 44 34 33 42 30 41 32 31 46 30 46 39 43 41 31 34 36 44 39 30 37 35 35 38 33 34 30 32 31 30 32 20 24 34 43 45 36 30 38 42 31 31 44 44 41 33 36 36 35 44 41 35 31 41 39 34 35 33 32 46 45 45 38 32 42 39 43 Data Ascii: ECA4 $4CE422446D43B0A21F0F9CA146D9075583402102 $4CE608B11DDA3665DA51A94532FEE82B9C2EC359 $4EFF3D0C9DE539CF1E27BFC5B3E23BC7CB2D41A9 $4FE78C2FF1468CCF2193E33E2E79066862D52AEC $506B473E673E38EA9FECB7A5A73DD1E1FC37B555 $51691C7926B134AB582F3489D23
Nov 3, 2024 09:35:36.224797010 CET	776	IN	Data Raw: 35 36 31 43 39 32 46 45 41 41 30 34 32 37 46 33 41 46 30 37 32 39 36 43 45 39 45 30 20 24 35 46 34 36 44 44 41 41 46 43 43 42 43 39 45 46 37 35 30 33 33 36 35 36 30 38 45 46 31 43 36 41 34 39 44 43 35 32 35 30 20 24 35 46 38 41 43 44 39 44 36 36 Data Ascii: 561C92FEAA0427F3AF07296CE9E0 $5F46DDAAFCCBC9EF7503365608EF1C6A49DC5250 $5F8ACD9D6624450926AB0BEDB7DDE9AE43B0D04C $601021EEAF3207505D67DEB77F40A9914A9B8856 $603CE0404FEB3BD363225C56FE429913E540E5FC $6052B7DC00F4E86B760350151665510BB9AE4C03 $60E
Nov 3, 2024 09:35:36.224808931 CET	1236	IN	Data Raw: 42 30 42 35 44 35 44 42 20 24 36 39 34 31 39 44 33 36 31 39 38 45 42 30 35 30 38 39 30 34 36 36 30 41 41 45 43 41 45 45 37 38 35 44 36 38 38 41 36 31 20 24 36 41 36 30 31 39 38 37 30 33 41 31 32 44 36 35 30 45 42 42 36 45 43 37 35 31 43 44 41 45 Data Ascii: B0B5D5DB $69419D36198EB0508904660AAECAEE785D688A61 $6A60198703A12D650EBB6EC751CDAEB611BBC04D $6A6A34B55DF1B0A1D97376721E7669A26ACD447C $6C95E81A86B48DB835AE1431277A301318422A18 $6E23234E4A37971B3695A6CDB5A462564E629DF9 $6E736FF4BA2845381A2FEE4
Nov 3, 2024 09:35:36.224821091 CET	1236	IN	Data Raw: 30 43 45 36 45 38 41 30 41 31 41 35 42 35 42 38 34 35 42 46 33 46 31 34 44 32 35 32 44 30 44 46 20 24 37 43 36 46 44 46 31 43 45 45 37 43 39 32 34 45 45 30 36 43 30 36 34 37 30 38 43 39 45 31 43 43 30 42 43 38 38 33 35 43 20 24 37 43 39 46 43 37 Data Ascii: 0CE6E8A0A1A5B5B845BF3F14D252D0DF $7C6FDF1CEE7C924EE06C064708C9E1CC0BC8835C $7C9FC7C99D7F83980E621BA8D4E0D40FCE53104F $7F35906CE8E33C7FB60E9EA12101AB4CBE13403C $7FE441E277BE331F249DBF8971E5B3D39418845A $80F322ED0995F27CD26B5A9DE7B804F92E8ACA94
Nov 3, 2024 09:35:36.224833965 CET	1236	IN	Data Raw: 33 37 36 32 30 42 46 33 37 30 30 45 37 42 20 24 39 31 38 30 38 34 30 46 36 42 46 46 32 33 35 43 41 37 46 34 41 35 31 42 45 43 34 36 30 37 35 42 35 41 35 42 31 35 30 39 20 24 39 32 34 37 42 35 34 44 43 44 34 39 31 37 34 44 42 44 38 31 37 41 41 37 Data Ascii: 37620BF3700E7B $9180840F6BFF235CA7F4A51BEC46075B5A5B1509 $9247B54DCD49174DBD817AA73FD6DE804DFEC2C2 $92A8C8292F06E18B116DDD50F517040A17D80512 $93515322616E4C93FFB5993936F187B0DE005F8C $9376A43695CBB66C256DCC87932EE885EA9AF5EC $94E412F3EE1978C5E
Nov 3, 2024 09:35:36.229643106 CET	1236	IN	Data Raw: 34 36 34 34 46 30 45 43 35 38 39 45 45 41 32 46 35 30 31 42 42 38 36 37 45 33 32 45 35 39 39 46 38 31 36 39 44 41 20 24 41 41 36 39 43 41 44 41 31 46 45 41 36 33 37 38 45 44 44 37 37 36 30 31 31 43 38 41 45 37 42 44 37 41 41 41 37 31 35 39 20 24 Data Ascii: 4644F0EC589EEA2F501BB867E32E599F8169DA $AA69CADA1FEA6378EDD776011C8AE7BD7AAA7159 $AB7366925C446424E7EE33179BEAB4B12D8696B6 $AC249C56C11FDDFA9E8DE56B182B13AC8A4672BE $ADC35E769B42A3CAB8557E0B5295D3F152595EF8 $ADC776E831EC4609D6D5AC0D5A757B00FC6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49817	216.218.219.41	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:35.714035988 CET	175	OUT	GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49823	45.66.35.11	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:36.495145082 CET	172	OUT	GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49829	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:37.557403088 CET	175	OUT	GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49835	193.23.244.244	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:38.461122990 CET	175	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49836	216.218.219.41	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:38.929541111 CET	175	OUT	GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:39.696154118 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:39 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:39 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 34 35 2e 31 34 31 2e 32 31 35 2e 35 36 20 38 34 33 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 61 59 56 48 44 30 51 71 75 63 6c 6d 58 48 49 76 62 77 6c 64 43 45 49 59 4f 6f 36 59 6c 5a 37 50 7a 74 73 42 35 72 57 6d 30 43 65 41 51 41 67 42 41 42 59 4b 72 38 6d 0a 69 49 64 59 75 76 36 65 58 71 66 79 62 73 79 39 36 68 64 6b 57 69 51 63 37 31 51 68 55 6a 34 61 54 54 35 35 79 6b 78 45 67 66 45 36 38 6e 39 50 64 47 39 58 53 62 6c 35 2b 77 55 2f 49 50 38 43 0a 79 46 63 55 4b 56 46 37 49 6b 7a 41 42 73 6a 32 65 32 52 45 34 37 30 6a 52 6b 4c 36 77 74 63 6b 6b 71 73 58 78 4b 6a 75 39 59 70 44 76 33 63 4b 45 2f 5a 31 54 64 32 48 65 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 57 43 71 2f 4a 6f 69 48 57 4c 72 2b [TRUNCATED] Data Ascii: router Quetzalcoatl 45.141.215.56 8430 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAaYVHD0QquclmXHIvbwldCEIYOo6YlZ7PztsB5rWm0CeAQAgBABYKr8miIdYuv6eXqfybsy96hdkWiQc71QhUj4aTT55ykxEgfE68n9PdG9XSbl5+wU/IP8CyFcUKVF7IkzABsj2e2RE470jRkL6wtckkqsXxKju9YpDv3cKE/Z1Td2Hegg=-----END ED25519 CERT-----master-key-ed25519 WCq/JoiHWLr+nl6n8m7MveoXZFokHO9UIVI+Gk0+ecoor-address [2a12:a800:2:1:45:141:215:56]:8430platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:23:48fingerprint 5A7D E908 3BE6 228A 4339 55A4 649C 9865 C909 676Auptime 324066bandwidth 1073741824 1073741824 7290636extra-info-digest 865236792538F6B57AAE337CF4E02E067C9751FF sRTzbsfqZuyJF2Gvyllzvrxo4gE3M8qWYmDho/a1rO8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM7rdccbDS85i2LeGoAluJvxILf260QWFZvcDJhVdB3wS2JewPwi7rfjDRnTj5XXJc2Gm6PYCxjkByB/glW/IvbrfkQ+Y608Blbq04EEZvXwS1i/ACBgA1Ya [TRUNCATED]
Nov 3, 2024 09:35:39.696170092 CET	764	IN	Data Raw: 48 6d 68 78 5a 5a 4d 75 71 76 51 46 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 Data Ascii: HmhxZZMuqvQFAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL14+tqxvYaTEw9V1DasHGlbNVgSjQUSkOUnZ9sFctWhskzK4lwpminq7l40C3wc0UjDRSPavBd5PLfBg7uu3yEzj3mBX5usFbk5VlshkML/4ZGEleS+6SyFQWMFqyIxTnPtEIg6rfE5
Nov 3, 2024 09:35:39.696186066 CET	1236	IN	Data Raw: 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 30 32 46 43 46 36 32 43 30 41 44 33 41 44 31 44 32 30 38 44 37 46 32 37 45 31 32 45 38 38 34 30 45 46 35 33 43 37 45 30 20 24 30 33 34 36 35 44 32 31 41 32 32 42 Data Ascii: D ED25519 CERT-----family $02FCF62C0AD3AD1D208D7F27E12E8840EF53C7E0 $03465D21A22B24B242301471D5AA11E4E0E0C915 $035F813195F0CB9F567EDFDF60C6745CA36BA0BD $0632EC43FEA8EA3F377FE2E34DA671746F1642DD $0705F969B825FAE29BCEB3F692B0A4224DED82E0 $07DCE
Nov 3, 2024 09:35:39.696197033 CET	1236	IN	Data Raw: 41 36 42 39 38 42 39 42 20 24 31 38 39 43 34 34 44 44 30 36 33 31 32 44 36 44 46 38 46 42 35 37 41 39 34 34 45 36 38 31 39 46 46 32 34 35 37 34 30 43 20 24 31 41 32 34 33 44 41 36 46 36 33 39 41 39 43 39 39 42 34 33 39 31 31 35 38 45 30 45 31 34 Data Ascii: A6B98B9B $189C44DD06312D6DF8FB57A944E6819FF245740C $1A243DA6F639A9C99B4391158E0E14E89C29754C $1A45601A517304EA7C8DC9339A99FE6C65CAA499 $1B6BCBCDB384364B6FB4F3576CA70AECFC083641 $1E3C197C8C922128FF049856E0536FF9CB4E5E8C $1F2F634D6D87CF6C5358C13
Nov 3, 2024 09:35:39.696207047 CET	1236	IN	Data Raw: 45 32 35 42 32 43 37 39 35 34 35 36 30 39 43 43 30 45 35 38 37 36 35 43 44 41 46 46 33 34 39 35 20 24 33 33 35 33 31 31 43 36 30 44 43 42 33 38 41 31 33 37 31 35 38 38 41 37 46 31 32 34 44 46 30 44 32 44 43 32 46 34 35 39 20 24 33 33 44 45 42 46 Data Ascii: E25B2C79545609CC0E58765CDAFF3495 $335311C60DCB38A1371588A7F124DF0D2DC2F459 $33DEBFF96FD95D7D5084026F6C4A55F9EC4A094C $3443ECBD0E1E71179B0F0B98184A48E255FE0E18 $34B80D703F4D6350146B684E66D962A23A830117 $34CA0E8F7838FCC9984C7BAA282884A4F843A423
Nov 3, 2024 09:35:39.696218014 CET	636	IN	Data Raw: 35 35 42 43 31 44 41 39 34 44 33 32 43 46 20 24 34 33 45 46 35 31 34 31 41 34 34 31 37 44 30 42 46 31 42 30 41 42 32 41 44 32 43 33 44 37 34 43 32 32 33 35 35 44 30 41 20 24 34 34 36 37 43 46 38 34 41 34 35 39 39 39 43 43 35 35 33 32 33 32 38 34 Data Ascii: 55BC1DA94D32CF $43EF5141A4417D0BF1B0AB2AD2C3D74C22355D0A $4467CF84A45999CC553232846CB6AA5FEBAC058B $446E16B00D5131DAC9643AB10136B3CD19B1E9B9 $44FA36A839BA35EB15F3EC5CB5FB355238A32ABC $44FF5FFA5F90096198D514412A78C1692DBEB0EA $460D13CE3971BD213
Nov 3, 2024 09:35:39.696235895 CET	1236	IN	Data Raw: 36 32 44 35 32 41 45 43 20 24 35 30 36 42 34 37 33 45 36 37 33 45 33 38 45 41 39 46 45 43 42 37 41 35 41 37 33 44 44 31 45 31 46 43 33 37 42 35 35 35 20 24 35 31 36 39 31 43 37 39 32 36 42 31 33 34 41 42 35 38 32 46 33 34 38 39 44 32 33 41 39 35 Data Ascii: 62D52AEC $506B473E673E38EA9FECB7A5A73DD1E1FC37B555 $51691C7926B134AB582F3489D23A95E59DC3470C $51972320F5F278EFD1467943A9B70A73207A9298 $51D5A72A2C78D1372BE1CB1F3EE382C37763B1FF $51FAFEABB266B7E4E1EB4E6120DF2D7F719157EB $526AD50C9DE6AF533DEBE8F
Nov 3, 2024 09:35:39.696247101 CET	1236	IN	Data Raw: 34 46 45 42 33 42 44 33 36 33 32 32 35 43 35 36 46 45 34 32 39 39 31 33 45 35 34 30 45 35 46 43 20 24 36 30 35 32 42 37 44 43 30 30 46 34 45 38 36 42 37 36 30 33 35 30 31 35 31 36 36 35 35 31 30 42 42 39 41 45 34 43 30 33 20 24 36 30 45 35 32 31 Data Ascii: 4FEB3BD363225C56FE429913E540E5FC $6052B7DC00F4E86B760350151665510BB9AE4C03 $60E521B632D83971ECF8D454AF558F2C238BC9A5 $6183B493ACFF41B28745CF0322E75AD7BDE4A48B $61A2104D7E69867C3F3EF981077266F968C1752A $6212040CE7774652B4F727940E6F632E015023DD
Nov 3, 2024 09:35:39.696259975 CET	1236	IN	Data Raw: 34 30 46 38 33 44 42 32 32 31 30 35 34 38 20 24 37 33 38 35 36 31 39 32 45 45 32 31 44 46 46 43 33 37 46 36 39 35 31 38 36 31 46 42 31 39 35 39 36 37 39 41 35 35 35 38 20 24 37 34 31 33 36 37 35 45 44 32 35 32 42 32 39 33 39 35 35 36 45 44 30 30 Data Ascii: 40F83DB2210548 $73856192EE21DFFC37F6951861FB1959679A5558 $7413675ED252B2939556ED0098C3983D1AF3191A $745107A651BCFE497C211D4EC93853B10E68F723 $74F49CD5F9E94EDBF1F8D8705B4C64E88C1CC344 $75508825246CE844F3DD603634AB75029C6EC52D $75ADD82FA44C8E7D7
Nov 3, 2024 09:35:39.696269035 CET	140	IN	Data Raw: 35 32 32 46 33 30 41 33 43 45 41 37 43 36 39 32 41 30 34 31 38 43 39 33 36 32 33 32 42 41 32 45 35 34 46 38 42 33 20 24 38 41 42 37 36 36 46 42 31 42 45 35 34 36 36 39 35 35 39 42 38 32 31 36 35 39 36 34 42 38 44 37 39 44 41 38 30 31 31 39 20 24 Data Ascii: 522F30A3CEA7C692A0418C936232BA2E54F8B3 $8AB766FB1BE54669559B82165964B8D79DA80119 $8B30FEEE3790A40063AAF8E71EC8773F71FB60BF $8B67321D615A8487
Nov 3, 2024 09:35:39.701356888 CET	1236	IN	Data Raw: 30 34 34 43 34 34 37 32 32 36 35 34 32 38 35 45 36 44 33 43 35 37 36 33 20 24 38 42 37 30 38 34 38 46 37 34 42 44 35 41 39 30 46 36 42 39 45 30 43 42 35 35 35 45 37 44 38 43 31 38 46 46 33 32 35 46 20 24 38 42 42 41 33 36 32 33 43 44 35 34 30 34 Data Ascii: 044C44722654285E6D3C5763 $8B70848F74BD5A90F6B9E0CB555E7D8C18FF325F $8BBA3623CD5404A8F173DC4CC9EBBE3B09D967F1 $8D1154214BD6151F0427D4A158E71D62E21E0766 $8D4639F135C908EB93B4224BA719184EAA1E6D05 $8E22D75D49EFBBEA1D719976D5A78750B2C0C227 $8E47775

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49842	193.23.244.244	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:39.531824112 CET	175	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49848	45.66.35.11	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:40.597120047 CET	172	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49854	216.218.219.41	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:42.078979969 CET	175	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49860	216.218.219.41	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:42.601691008 CET	175	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49861	216.218.219.41	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:42.845777988 CET	175	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49862	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:43.379980087 CET	175	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49866	193.23.244.244	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:43.615288019 CET	175	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49869	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:44.442387104 CET	175	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	58365	45.66.35.11	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:45.803585052 CET	172	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:46.871419907 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:46 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:46 GMT Data Raw: 72 6f 75 74 65 72 20 70 75 6e 69 73 68 65 72 20 38 31 2e 37 39 2e 34 35 2e 31 38 34 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 65 64 41 63 64 46 70 79 2f 47 44 76 65 4b 44 47 44 50 63 5a 57 72 46 78 36 45 4b 48 50 4d 77 57 52 4c 31 71 72 76 62 30 45 49 6d 66 5a 57 41 51 41 67 42 41 44 48 74 59 37 64 0a 32 4d 6f 68 55 31 63 58 63 57 34 6d 4d 58 48 67 4e 50 30 6a 6d 41 52 44 4d 77 63 58 66 70 6b 31 52 72 5a 43 76 6b 65 4d 70 6c 45 7a 6a 76 77 57 5a 74 4d 6b 77 38 6d 33 73 50 56 4b 38 39 45 73 0a 33 49 4c 58 6d 6b 45 77 62 37 6d 44 57 43 74 79 6f 50 32 6f 72 30 4b 2b 58 6d 68 31 68 30 6f 36 41 56 71 45 2f 73 47 77 72 70 36 66 44 35 52 78 69 79 66 71 6c 31 72 43 76 67 30 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 78 37 57 4f 33 64 6a 4b 49 56 4e 58 46 33 46 75 4a [TRUNCATED] Data Ascii: router punisher 81.79.45.184 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1edAcdFpy/GDveKDGDPcZWrFx6EKHPMwWRL1qrvb0EImfZWAQAgBADHtY7d2MohU1cXcW4mMXHgNP0jmARDMwcXfpk1RrZCvkeMplEzjvwWZtMkw8m3sPVK89Es3ILXmkEwb7mDWCtyoP2or0K+Xmh1h0o6AVqE/sGwrp6fD5Rxiyfql1rCvg0=-----END ED25519 CERT-----master-key-ed25519 x7WO3djKIVNXF3FuJjFx4DT9I5gEQzMHF36ZNUa2Qr4platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 02:26:25fingerprint 5A91 4CC3 19F0 6AE7 262E E441 FF31 D188 B483 1077uptime 910148bandwidth 524288 1048576 657461extra-info-digest 51A9775FC7D0478CA7056F8D75D39E9328EF7A09 DbSGaNnZaKjPS0ZP/JH+z5n9jJojVm7WsaST9Qh4nasonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK4hS2VfKtt/UdC+4wYsxHWajC/v3qKqwr6vvNJDsJsaPEce414LFRhgzoRaWGwYSOkG2hdRCL1NZFlaXN9srvw1tHX3dD3dFwTvtVXj1bKyz5XnHi1kWVUtjBaj4hLHPkhWIfQQPIpdMe1NjQGo1B3DaPHuKvDiysj94XuOjj0vAgMBAAE [TRUNCATED]
Nov 3, 2024 09:35:46.871469021 CET	1207	IN	Data Raw: 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4e 75 39 61 38 35 34 4f 61 50 74 4d 76 66 63 47 4e 4e 75 4a 58 54 30 68 43 52 52 49 6f 6e 66 4d 56 4a 62 73 67 4a Data Ascii: ey-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMNu9a854OaPtMvfcGNNuJXT0hCRRIonfMVJbsgJlQDDuVxUkXiVj1zBhPZ12TlwtVWu7oL4NXPlKt2U+Ea4ow9K/lmzwanr7s+aE5jHNhcNthOllm6WZoqe0NXndlOW1LvR895DK8O+pK1rNo/44ypNsGZqRo4nCYyPWsFoLgJfAgMBAAE=-----END RSA PUBLI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	58374	193.23.244.244	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:47.381236076 CET	175	OUT	GET /tor/server/fp/56909edcdffc04aa38593466f51f3fb2ac63414c HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	58381	45.66.35.11	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:48.444783926 CET	172	OUT	GET /tor/server/fp/56909edcdffc04aa38593466f51f3fb2ac63414c HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:49.487246990 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:49 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:49 GMT Data Raw: 72 6f 75 74 65 72 20 54 6f 72 53 63 61 6c 65 32 20 35 31 2e 31 35 39 2e 31 39 35 2e 34 31 20 39 39 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 68 71 41 54 77 6a 4b 61 39 64 4c 73 6a 44 4d 41 65 57 49 58 6f 59 6f 76 36 2f 33 63 6f 51 59 34 4b 65 72 66 53 37 49 6e 4a 74 6f 50 4a 32 41 51 41 67 42 41 42 37 68 50 44 4a 0a 6d 6b 45 76 66 32 7a 30 66 68 61 4c 53 32 55 76 6b 78 63 37 73 58 71 63 65 62 53 42 37 5a 44 35 34 37 56 6c 2f 59 78 38 68 79 45 6c 44 50 69 68 68 62 39 48 63 31 74 50 31 32 59 2f 6a 55 71 52 0a 46 4a 56 76 45 49 67 6e 51 61 42 38 51 45 41 2f 69 32 4a 6e 61 6e 61 33 2b 33 79 66 55 57 66 2b 78 50 68 7a 4f 43 39 52 50 2f 65 52 37 32 59 74 62 63 4e 77 65 4b 32 63 59 41 51 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 65 34 54 77 79 5a 70 42 4c 33 39 73 39 48 34 57 [TRUNCATED] Data Ascii: router TorScale2 51.159.195.41 993 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1hqATwjKa9dLsjDMAeWIXoYov6/3coQY4KerfS7InJtoPJ2AQAgBAB7hPDJmkEvf2z0fhaLS2Uvkxc7sXqcebSB7ZD547Vl/Yx8hyElDPihhb9Hc1tP12Y/jUqRFJVvEIgnQaB8QEA/i2Jnana3+3yfUWf+xPhzOC9RP/eR72YtbcNweK2cYAQ=-----END ED25519 CERT-----master-key-ed25519 e4TwyZpBL39s9H4Wi0tlL5MXO7F6nHm0ge2Q+eO1Zf0or-address [2001:bc8:1201:512:da5e:d3ff:fe6c:8241]:993platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 05:59:05fingerprint 5690 9EDC DFFC 04AA 3859 3466 F51F 3FB2 AC63 414Cuptime 64810bandwidth 1073741824 1073741824 45069312extra-info-digest DF9EAA202E064430A880D78A40FA4362AA50571E Im8/GWwYofGUY0xvL05BE1cup6YyrLLH9BSpfCa6onUonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMs9Ko0ZVauMJJGJ+qtJ/KJfZdOCpmyDXwQR53W/Gu/C3pH2RglXgda5+GxyChH3yonQaaTNPP6dZ+WtPGzS4LbkflRtdwXx8ip0xBxOBwF2qyD0O15B [TRUNCATED]
Nov 3, 2024 09:35:49.487277985 CET	1236	IN	Data Raw: 33 56 2b 36 6e 36 44 7a 54 51 4c 75 44 55 70 30 35 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 Data Ascii: 3V+6n6DzTQLuDUp05AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANFrA81IH9/wR9gS/UJwNgFsQDcHm7HbNQTz4pLIJu1OA4kjqy71/5xYRBpoku0LQOH1l+E7h1QhdlFigezx44rFa4LCM+gXOhBunv/Jv33X4EGGfBylnbS8OwOF+tD5VaV0PQj
Nov 3, 2024 09:35:49.487288952 CET	315	IN	Data Raw: 6b 71 50 45 30 59 71 58 4c 32 2f 43 6b 37 41 37 42 77 50 31 6b 64 4b 63 6d 45 45 54 39 56 67 42 62 33 39 50 48 48 2f 43 71 32 4a 34 6e 74 61 33 74 74 72 57 70 51 6b 44 68 55 38 57 4f 6d 56 44 35 4c 57 44 6c 74 42 67 0a 72 6f 75 74 65 72 2d 73 69 Data Ascii: kqPE0YqXL2/Ck7A7BwP1kdKcmEET9VgBb39PHH/Cq2J4nta3ttrWpQkDhU8WOmVD5LWDltBgrouter-signature-----BEGIN SIGNATURE-----ef5avsIzlG4nLy3q/vOD8JOF9ca2CgNaATFdJ0J3ci4kheQOS0kXBHt/ED+zi+/W14gFAFveDdF7W7G3OQOh4XB6vYRbje+deK1mUAtISVFUPUR0Zp0xwegi7QhTGu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	58387	193.23.244.244	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:50.050625086 CET	175	OUT	GET /tor/server/fp/f88691c71cf4f81b1bb40b05dc05812fc835395f HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	58391	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:50.131846905 CET	175	OUT	GET /tor/server/fp/96f8ace10eac14e76cdea4c45679eaffb833f453 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	58394	45.66.35.11	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:51.118591070 CET	172	OUT	GET /tor/server/fp/f88691c71cf4f81b1bb40b05dc05812fc835395f HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:52.158814907 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:52 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:52 GMT Data Raw: 72 6f 75 74 65 72 20 72 65 6c 61 79 6f 6e 30 31 33 35 20 31 38 35 2e 32 32 30 2e 31 30 31 2e 31 33 35 20 31 30 31 33 35 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 59 33 41 58 59 6e 2b 4c 2b 76 6a 4a 32 66 76 2f 55 2b 6a 44 48 64 68 51 4e 64 4d 6f 30 2b 69 31 73 33 47 50 70 31 6c 78 56 45 54 51 2b 76 41 51 41 67 42 41 43 79 6d 63 59 54 0a 76 48 47 76 79 77 70 78 68 5a 6c 6f 4a 56 2b 45 78 4a 52 4a 4e 62 70 73 67 42 37 56 6c 30 72 2f 73 59 46 2b 4d 61 6f 69 64 44 52 59 36 68 66 61 2f 6a 77 66 74 68 2b 2b 37 42 56 42 64 31 66 4e 0a 2f 6d 69 39 30 55 45 56 73 56 6c 74 6e 2b 63 4b 37 69 4b 33 6b 48 35 36 51 2b 43 6d 58 4d 6c 50 54 55 5a 5a 54 36 43 4a 46 77 76 58 73 49 35 51 56 64 31 76 46 75 62 35 79 41 77 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 73 70 6e 47 45 37 78 78 72 38 [TRUNCATED] Data Ascii: router relayon0135 185.220.101.135 10135 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1Y3AXYn+L+vjJ2fv/U+jDHdhQNdMo0+i1s3GPp1lxVETQ+vAQAgBACymcYTvHGvywpxhZloJV+ExJRJNbpsgB7Vl0r/sYF+MaoidDRY6hfa/jwfth++7BVBd1fN/mi90UEVsVltn+cK7iK3kH56Q+CmXMlPTUZZT6CJFwvXsI5QVd1vFub5yAw=-----END ED25519 CERT-----master-key-ed25519 spnGE7xxr8sKcYWZaCVfhMSUSTW6bIAe1ZdK/7GBfjEor-address [2a0b:f4c2:1::135]:10135platform Tor 0.4.8.8 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 05:11:50fingerprint F886 91C7 1CF4 F81B 1BB4 0B05 DC05 812F C835 395Fuptime 4752309bandwidth 1073741824 1073741824 19120651extra-info-digest 69CC1281DF8FD1BCA71A4860B2040ED79B66B7C1 0Od6HAy66UKdRuCuW04EUtnHg/J1BknBKypsLktaqHQonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKxs+DyVpmjvGMg0BMjKAqO2vnhz5iEmyJciYxvb381VLQAx/fJH3WVOYSPZbxNU22L0PqMqbEjgwwnvvbFCCpezq3m4HoIQg2PZAEx2RhrC1PGtbkgG/Tq5LfgCZCU [TRUNCATED]
Nov 3, 2024 09:35:52.158843040 CET	1236	IN	Data Raw: 74 66 68 48 33 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d Data Ascii: tfhH3AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAML5b+zBNYluCbm1XGHc/YYsiN2jchJuzeygyMhmBe9cB5zLGcULchDG+nX/5B0hvVMK8+xkEUuPh1AYG482Cs4WpL6in2n5EC5hXs+mxX/VRzqaXtuRTMAuIrXN2x/KOhuKaoFzvhvD0yH9H/E
Nov 3, 2024 09:35:52.158853054 CET	246	IN	Data Raw: 68 43 67 0a 72 6f 75 74 65 72 2d 73 69 67 6e 61 74 75 72 65 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 53 49 47 4e 41 54 55 52 45 2d 2d 2d 2d 2d 0a 45 64 69 6f 70 44 79 72 58 65 6d 38 33 6e 34 76 63 69 61 37 42 47 4b 63 51 58 4b 4a 2f 78 43 55 6e 7a 30 Data Ascii: hCgrouter-signature-----BEGIN SIGNATURE-----EdiopDyrXem83n4vcia7BGKcQXKJ/xCUnz03vZssAEod/nxs3E2T8YhNxBghwkAG8M1TlH7oH09Yom/o29y3ckDm5s9IQC7Ik5ZFMXEYNx6OKXIDJY0y+DRXmMZqhCuRmin7q7zMMKMxS+x70Xk+4K6/yoQBjqLBHo5xPNG5WLs=-----END SIGNATURE---

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	58397	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:51.194163084 CET	175	OUT	GET /tor/server/fp/96f8ace10eac14e76cdea4c45679eaffb833f453 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	58401	216.218.219.41	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:52.249631882 CET	175	OUT	GET /tor/server/fp/96f8ace10eac14e76cdea4c45679eaffb833f453 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	58413	193.23.244.244	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:53.989592075 CET	175	OUT	GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	58419	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:55.057925940 CET	175	OUT	GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	58425	45.66.35.11	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:55.829320908 CET	172	OUT	GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:35:56.882249117 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:35:56 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:35:56 GMT Data Raw: 72 6f 75 74 65 72 20 48 61 70 70 79 54 6f 72 20 32 30 39 2e 31 34 31 2e 36 30 2e 32 31 39 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 67 4a 41 59 72 6d 75 79 7a 6f 41 30 2f 6c 6d 6d 64 48 51 32 66 6c 63 37 41 4b 41 49 37 6c 53 51 74 32 56 33 72 63 61 34 56 74 64 75 48 71 41 51 41 67 42 41 43 55 42 4b 54 56 0a 52 65 6d 58 2f 70 4b 64 78 32 47 6e 45 66 34 62 6d 6d 52 4f 6f 48 31 4e 35 4a 4b 71 4e 65 4e 33 57 2b 6e 43 49 65 50 4e 37 47 72 38 2f 65 32 70 6d 71 2f 53 35 78 35 55 54 71 41 51 78 37 2f 75 0a 57 74 58 76 69 39 4d 33 47 79 36 48 37 67 32 4b 5a 55 51 6f 66 33 59 77 63 63 33 2b 61 37 6b 62 37 4e 79 4e 59 31 4c 33 6e 53 4b 79 30 37 37 32 75 68 42 35 37 54 4b 48 66 51 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6c 41 53 6b 31 55 58 70 6c 2f 36 53 6e 63 64 [TRUNCATED] Data Ascii: router HappyTor 209.141.60.219 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1gJAYrmuyzoA0/lmmdHQ2flc7AKAI7lSQt2V3rca4VtduHqAQAgBACUBKTVRemX/pKdx2GnEf4bmmROoH1N5JKqNeN3W+nCIePN7Gr8/e2pmq/S5x5UTqAQx7/uWtXvi9M3Gy6H7g2KZUQof3Ywcc3+a7kb7NyNY1L3nSKy0772uhB57TKHfQE=-----END ED25519 CERT-----master-key-ed25519 lASk1UXpl/6SncdhpxH+G5pkTqB9TeSSqjXjd1vpwiEor-address [2605:6400:20:a28:b37e:88e9:caa1:7b9c]:9001platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 20:40:34fingerprint FE27 7F2B 34C9 0904 C1A2 D704 ED2A 46FC 0802 400Cuptime 4410101bandwidth 1073741824 1073741824 8503151extra-info-digest EAB656F26B43CE56B02390FF4076A548AB864702 PIbpAgNRXZhiaxy53c7ySSDBfpMZZDJS/MbIRb7vT3Eonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL06TyhNChZstL/n8rmtdpMeHGfOTp8KHuzztwgue2YJx5hTP3+jFtVqurlj5znDZKYKu8VlXG/6jXRW4ic+6iu8FT7G75i6UawcjeoLTlFXI/xpSV [TRUNCATED]
Nov 3, 2024 09:35:56.882263899 CET	212	IN	Data Raw: 79 4a 68 75 42 2f 54 31 50 70 2b 33 50 6f 66 37 6c 33 62 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 Data Ascii: yJhuB/T1Pp+3Pof7l3bAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMh1VmDJF2Bo2TVKuQAd0TZZdy7tI9gvgtLvLx8Zhmnf1rqGiYlgJsG/pU2iguKNcZk4ne9ZqKBuYs8ZIR7XN+v/YBZx5suXKBvUVgl
Nov 3, 2024 09:35:56.882271051 CET	1236	IN	Data Raw: 64 4d 63 54 77 72 53 72 36 35 54 77 48 7a 77 48 51 0a 37 4e 47 78 32 39 59 2b 6e 46 70 48 6d 4c 69 7a 72 39 72 74 55 66 76 34 4a 50 59 6c 35 66 34 35 6d 71 34 7a 68 2f 52 30 54 70 54 33 71 66 62 59 47 71 4e 62 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d Data Ascii: dMcTwrSr65TwHzwHQ7NGx29Y+nFpHmLizr9rtUfv4JPYl5f45mq4zh/R0TpT3qfbYGqNbAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----hWL1zYgDLuhEJASxUSyo+/ed6PCci4pX9mWtXbT4hxMPmMs4WUBn4qFplcDZ6eMzef2a/GKZhZYfCepw6BuibzDz
Nov 3, 2024 09:35:56.882282972 CET	764	IN	Data Raw: 3a 39 39 33 0a 61 63 63 65 70 74 20 2a 3a 39 39 34 0a 61 63 63 65 70 74 20 2a 3a 39 39 35 0a 61 63 63 65 70 74 20 2a 3a 31 31 39 34 0a 61 63 63 65 70 74 20 2a 3a 31 32 32 30 0a 61 63 63 65 70 74 20 2a 3a 31 32 39 33 0a 61 63 63 65 70 74 20 2a 3a Data Ascii: :993accept :994accept :995accept :1194accept :1220accept :1293accept :1500accept :1533accept :1677accept :1723accept :1755accept :1863accept :2082accept :2083accept :2086-2087accept :2095-2096accept :2102-2104a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	58439	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:58.956968069 CET	175	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	58442	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:35:59.724456072 CET	175	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	58448	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:00.491580963 CET	175	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	58454	45.66.35.11	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:01.666470051 CET	172	OUT	GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:36:02.730010986 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:36:02 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:36:02 GMT Data Raw: 72 6f 75 74 65 72 20 46 52 45 45 57 41 59 20 33 31 2e 32 32 30 2e 37 34 2e 31 33 33 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 69 44 41 52 62 44 69 59 45 79 6d 62 75 34 4a 61 36 39 54 61 56 6f 62 70 43 45 43 42 59 65 76 33 4b 7a 32 4f 6b 49 52 48 4f 61 61 62 36 79 41 51 41 67 42 41 41 66 6f 77 46 48 0a 78 74 36 36 79 58 50 76 65 50 4c 65 34 43 4f 4e 67 6f 54 46 51 54 79 51 74 69 58 72 43 35 49 6a 4a 45 4c 72 6b 2f 54 38 4d 66 64 59 4d 6f 2f 4e 49 35 64 44 4a 32 53 59 33 65 6a 4f 79 59 66 48 0a 77 6b 76 62 66 6b 51 56 33 57 6c 52 32 41 43 6a 6e 2f 44 31 2f 41 6f 55 4f 78 43 51 7a 2f 59 35 49 55 53 6d 64 68 6b 73 57 5a 46 65 70 6d 35 43 54 4d 79 58 42 6e 65 54 36 67 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 48 36 4d 42 52 38 62 65 75 73 6c 7a 37 33 6a 79 33 [TRUNCATED] Data Ascii: router FREEWAY 31.220.74.133 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1iDARbDiYEymbu4Ja69TaVobpCECBYev3Kz2OkIRHOaab6yAQAgBAAfowFHxt66yXPvePLe4CONgoTFQTyQtiXrC5IjJELrk/T8MfdYMo/NI5dDJ2SY3ejOyYfHwkvbfkQV3WlR2ACjn/D1/AoUOxCQz/Y5IUSmdhksWZFepm5CTMyXBneT6gE=-----END ED25519 CERT-----master-key-ed25519 H6MBR8beuslz73jy3uAjjYKExUE8kLYl6wuSIyRC65Mplatform Tor 0.4.8.10 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 18:20:08fingerprint FE38 4392 C982 659A B28B 51FB 98C2 179B 5E8C E371uptime 7304799bandwidth 1073741824 1073741824 50485060extra-info-digest 18D4C29E489FE6A6D2F93F448494B997EA02C502 o1tS9GSW9Tvc75rT3ZmJqcG3SHx5041TIO3GqLzVV+sonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMowgJErPX2o8u8CntxxgRAlO3uiolfO03fGGNSbU/OmD+Q6TlOBLCTQVy51rIhg551TmcfkvDq9zHlqOj35PTwmL99PKzwd1KPPBUgUMAW1l0vOPAwuVS521+9X791HwAgTLp5Tc27r50VKQTr0yBU+WaZYO4CngxeRAKUT7 [TRUNCATED]
Nov 3, 2024 09:36:02.730026960 CET	1236	IN	Data Raw: 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 59 6c 54 79 63 32 34 52 4c 6b 77 34 35 4c 53 6f 46 6b 49 56 4d 53 36 48 41 32 47 46 Data Ascii: signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANYlTyc24RLkw45LSoFkIVMS6HA2GF+8yTOfp1pOY8STaZddPeDuHi3e9y0kGEVJFWNW4VmRzNASNZv8smiO8ugzM2qTw+XTRcjI/zWrlkOa3+86CWD0HY2OSqUEnCaT8SM8IlkVPEZGtyMObeDjdUUVYdvdIztOmSMGipdVShFHAgMBAAE=-----END
Nov 3, 2024 09:36:02.730038881 CET	113	IN	Data Raw: 4c 69 7a 61 50 6c 34 35 34 34 61 51 56 6c 70 2b 30 49 38 6b 6b 55 67 4d 6d 74 48 5a 37 45 61 72 53 63 67 78 4c 4b 33 44 58 67 4a 0a 4a 6b 43 6d 56 49 36 73 70 6b 50 33 6e 66 35 51 78 70 71 2b 74 4a 70 52 78 4e 75 59 62 56 6d 61 59 64 4f 44 6c 47 Data Ascii: LizaPl4544aQVlp+0I8kkUgMmtHZ7EarScgxLK3DXgJJkCmVI6spkP3nf5Qxpq+tJpRxNuYbVmaYdODlGDxYTg=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	58467	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:04.601057053 CET	175	OUT	GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:36:05.370913982 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:36:05 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:36:05 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 34 35 2e 31 34 31 2e 32 31 35 2e 35 36 20 38 34 33 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 61 59 56 48 44 30 51 71 75 63 6c 6d 58 48 49 76 62 77 6c 64 43 45 49 59 4f 6f 36 59 6c 5a 37 50 7a 74 73 42 35 72 57 6d 30 43 65 41 51 41 67 42 41 42 59 4b 72 38 6d 0a 69 49 64 59 75 76 36 65 58 71 66 79 62 73 79 39 36 68 64 6b 57 69 51 63 37 31 51 68 55 6a 34 61 54 54 35 35 79 6b 78 45 67 66 45 36 38 6e 39 50 64 47 39 58 53 62 6c 35 2b 77 55 2f 49 50 38 43 0a 79 46 63 55 4b 56 46 37 49 6b 7a 41 42 73 6a 32 65 32 52 45 34 37 30 6a 52 6b 4c 36 77 74 63 6b 6b 71 73 58 78 4b 6a 75 39 59 70 44 76 33 63 4b 45 2f 5a 31 54 64 32 48 65 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 57 43 71 2f 4a 6f 69 48 57 4c 72 2b [TRUNCATED] Data Ascii: router Quetzalcoatl 45.141.215.56 8430 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAaYVHD0QquclmXHIvbwldCEIYOo6YlZ7PztsB5rWm0CeAQAgBABYKr8miIdYuv6eXqfybsy96hdkWiQc71QhUj4aTT55ykxEgfE68n9PdG9XSbl5+wU/IP8CyFcUKVF7IkzABsj2e2RE470jRkL6wtckkqsXxKju9YpDv3cKE/Z1Td2Hegg=-----END ED25519 CERT-----master-key-ed25519 WCq/JoiHWLr+nl6n8m7MveoXZFokHO9UIVI+Gk0+ecoor-address [2a12:a800:2:1:45:141:215:56]:8430platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:23:48fingerprint 5A7D E908 3BE6 228A 4339 55A4 649C 9865 C909 676Auptime 324066bandwidth 1073741824 1073741824 7290636extra-info-digest 865236792538F6B57AAE337CF4E02E067C9751FF sRTzbsfqZuyJF2Gvyllzvrxo4gE3M8qWYmDho/a1rO8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM7rdccbDS85i2LeGoAluJvxILf260QWFZvcDJhVdB3wS2JewPwi7rfjDRnTj5XXJc2Gm6PYCxjkByB/glW/IvbrfkQ+Y608Blbq04EEZvXwS1i/ACBgA1Ya [TRUNCATED]
Nov 3, 2024 09:36:05.371006966 CET	1236	IN	Data Raw: 48 6d 68 78 5a 5a 4d 75 71 76 51 46 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 Data Ascii: HmhxZZMuqvQFAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL14+tqxvYaTEw9V1DasHGlbNVgSjQUSkOUnZ9sFctWhskzK4lwpminq7l40C3wc0UjDRSPavBd5PLfBg7uu3yEzj3mBX5usFbk5VlshkML/4ZGEleS+6SyFQWMFqyIxTnPtEIg6rfE5
Nov 3, 2024 09:36:05.371023893 CET	1236	IN	Data Raw: 31 38 30 33 33 41 32 32 38 32 37 45 33 43 34 36 20 24 30 41 37 36 43 30 41 30 41 37 32 31 44 44 42 43 33 32 34 42 37 30 35 41 44 42 46 43 39 35 46 44 38 30 36 41 45 38 35 35 20 24 30 41 46 39 38 32 43 43 37 31 41 30 31 44 39 35 45 38 39 35 39 44 Data Ascii: 18033A22827E3C46 $0A76C0A0A721DDBC324B705ADBFC95FD806AE855 $0AF982CC71A01D95E8959D763D0EC0E5A6C61244 $0B5BC76B3BE7553B229FD3E73F26AED41C31DD19 $0B8EF5F5016926F4245350FB37914E30BF36C528 $0CD666F9C9A40A8CFB1E6B9465597A51D3A1CBF8 $0CF48696F004482
Nov 3, 2024 09:36:05.371040106 CET	1236	IN	Data Raw: 32 37 44 44 42 39 30 34 44 36 34 39 45 37 41 35 32 36 30 38 38 42 37 45 31 35 42 42 34 32 43 35 33 42 42 35 33 46 36 30 20 24 32 37 46 41 45 39 39 43 30 44 42 41 38 43 44 39 44 42 46 45 34 32 44 32 44 32 34 36 34 42 34 43 36 38 45 45 42 30 30 44 Data Ascii: 27DDB904D649E7A526088B7E15BB42C53BB53F60 $27FAE99C0DBA8CD9DBFE42D2D2464B4C68EEB00D $28E427C3E7FEB76C58901DCF1565EA44589E437C $2979E1F476F04311E5088B5C12554E8B318F8A7B $2A7FE76900BB03DEAD983EB149BC8FB2F48B137F $2B7F152EAFEF8B99ABF42FBE2ED4682F5
Nov 3, 2024 09:36:05.371054888 CET	1236	IN	Data Raw: 32 41 31 41 38 32 37 36 39 34 46 32 30 30 33 41 44 30 39 34 42 30 20 24 33 39 32 42 45 46 44 43 42 30 32 36 41 35 36 38 45 30 37 37 37 38 36 45 37 39 46 44 45 35 38 39 41 39 43 30 45 34 35 31 20 24 33 39 33 43 33 44 42 32 45 46 38 31 43 34 36 39 Data Ascii: 2A1A827694F2003AD094B0 $392BEFDCB026A568E077786E79FDE589A9C0E451 $393C3DB2EF81C469CC80A982CC31570423829099 $39CE03A66016B0D69BC6C2A1F362C628436FEF7B $3A282FE698A04D83511D526A525F2C45896454AC $3A72AE52214E2F60182D311CF68B2AC7E1E849B0 $3AD0E099E
Nov 3, 2024 09:36:05.371072054 CET	1236	IN	Data Raw: 45 43 41 34 20 24 34 43 45 34 32 32 34 34 36 44 34 33 42 30 41 32 31 46 30 46 39 43 41 31 34 36 44 39 30 37 35 35 38 33 34 30 32 31 30 32 20 24 34 43 45 36 30 38 42 31 31 44 44 41 33 36 36 35 44 41 35 31 41 39 34 35 33 32 46 45 45 38 32 42 39 43 Data Ascii: ECA4 $4CE422446D43B0A21F0F9CA146D9075583402102 $4CE608B11DDA3665DA51A94532FEE82B9C2EC359 $4EFF3D0C9DE539CF1E27BFC5B3E23BC7CB2D41A9 $4FE78C2FF1468CCF2193E33E2E79066862D52AEC $506B473E673E38EA9FECB7A5A73DD1E1FC37B555 $51691C7926B134AB582F3489D23
Nov 3, 2024 09:36:05.371090889 CET	376	IN	Data Raw: 35 36 31 43 39 32 46 45 41 41 30 34 32 37 46 33 41 46 30 37 32 39 36 43 45 39 45 30 20 24 35 46 34 36 44 44 41 41 46 43 43 42 43 39 45 46 37 35 30 33 33 36 35 36 30 38 45 46 31 43 36 41 34 39 44 43 35 32 35 30 20 24 35 46 38 41 43 44 39 44 36 36 Data Ascii: 561C92FEAA0427F3AF07296CE9E0 $5F46DDAAFCCBC9EF7503365608EF1C6A49DC5250 $5F8ACD9D6624450926AB0BEDB7DDE9AE43B0D04C $601021EEAF3207505D67DEB77F40A9914A9B8856 $603CE0404FEB3BD363225C56FE429913E540E5FC $6052B7DC00F4E86B760350151665510BB9AE4C03 $60E
Nov 3, 2024 09:36:05.371107101 CET	1236	IN	Data Raw: 37 37 34 36 35 32 42 34 46 37 32 37 39 34 30 45 36 46 36 33 32 45 30 31 35 30 32 33 44 44 20 24 36 32 35 30 30 41 42 34 30 31 46 39 33 35 35 38 36 37 37 43 31 45 38 43 36 31 45 37 32 34 42 44 34 36 36 43 45 38 41 30 20 24 36 34 36 42 34 45 33 39 Data Ascii: 774652B4F727940E6F632E015023DD $62500AB401F93558677C1E8C61E724BD466CE8A0 $646B4E39B49F303B4B552A8F3CBB8FCD40BE7EB5 $64D90959E50D593D80ACD0E29A2BE9051EB66EEA $656BA6C00B21DB086611171C946288A29E2DF5BC $659B0645A1C264D9D8FF4C9DD2B08ADAC392D475 $6
Nov 3, 2024 09:36:05.371119976 CET	1236	IN	Data Raw: 37 35 30 32 39 43 36 45 43 35 32 44 20 24 37 35 41 44 44 38 32 46 41 34 34 43 38 45 37 44 37 36 34 31 34 31 34 38 43 46 45 35 45 31 31 33 31 43 44 32 41 44 30 44 20 24 37 36 34 34 42 35 37 44 44 38 36 33 30 35 46 33 42 38 31 37 32 46 45 46 36 43 Data Ascii: 75029C6EC52D $75ADD82FA44C8E7D76414148CFE5E1131CD2AD0D $7644B57DD86305F3B8172FEF6CEE85864D088BA7 $76BACC90CBA71714918554156CAABE955E7A940F $76CA419C68502FFC4D950D167E25EE0AD3A0A764 $77313C32AA48AB658299DA039DF6C627C126F570 $77D53F8C9545D1E6A4D
Nov 3, 2024 09:36:05.371134996 CET	1236	IN	Data Raw: 33 36 32 33 43 44 35 34 30 34 41 38 46 31 37 33 44 43 34 43 43 39 45 42 42 45 33 42 30 39 44 39 36 37 46 31 20 24 38 44 31 31 35 34 32 31 34 42 44 36 31 35 31 46 30 34 32 37 44 34 41 31 35 38 45 37 31 44 36 32 45 32 31 45 30 37 36 36 20 24 38 44 Data Ascii: 3623CD5404A8F173DC4CC9EBBE3B09D967F1 $8D1154214BD6151F0427D4A158E71D62E21E0766 $8D4639F135C908EB93B4224BA719184EAA1E6D05 $8E22D75D49EFBBEA1D719976D5A78750B2C0C227 $8E477758547F612659BD2864C91D641452833369 $8EAE810FA33F26341605D59F82D8AD58F7EA6
Nov 3, 2024 09:36:05.376106977 CET	1236	IN	Data Raw: 43 35 30 32 32 31 30 32 30 39 39 32 33 36 35 39 46 38 20 24 41 30 45 33 44 33 39 31 42 38 33 43 45 44 32 46 32 36 34 43 44 36 44 33 39 35 32 35 45 33 37 37 37 35 45 41 31 45 45 42 20 24 41 31 35 36 37 36 46 35 46 30 46 32 42 41 37 42 31 43 41 35 Data Ascii: C502210209923659F8 $A0E3D391B83CED2F264CD6D39525E37775EA1EEB $A15676F5F0F2BA7B1CA54446DDB46BEE6F699A95 $A1AB134123F9F534C7E09B6841A7ECAFD0282240 $A1F57EBAAC183C6B0A49E62E5B23E8C1BB6C1022 $A4F42AE65F11634C42A3F3952E719F47091BD36F $A5BBC2C61B1F6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	58475	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:06.034702063 CET	175	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	58479	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:06.803216934 CET	175	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:36:07.572335005 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:36:07 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:36:07 GMT Data Raw: 72 6f 75 74 65 72 20 46 72 65 65 45 78 69 74 20 31 37 39 2e 34 33 2e 31 35 39 2e 32 30 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 68 5a 41 64 76 53 4a 47 6b 62 67 72 41 44 2f 4a 6b 2b 58 4a 62 69 4e 6f 34 50 63 4b 46 49 68 36 6d 36 2f 33 7a 61 46 2b 41 75 77 50 47 72 41 51 41 67 42 41 43 4d 4c 6b 52 69 0a 67 61 66 30 6d 47 58 35 35 63 2b 32 31 51 4b 4d 75 53 6e 74 64 65 68 46 68 7a 30 71 65 30 50 53 4b 37 6d 44 63 65 4f 6a 46 52 48 48 37 76 4a 34 51 43 34 36 63 50 4e 50 47 59 43 4b 41 4b 7a 6b 0a 44 50 5a 33 5a 57 30 32 66 44 44 56 59 37 4c 59 43 32 6b 51 50 32 73 4d 4f 7a 52 53 76 7a 6d 67 78 75 42 41 56 58 75 72 2b 35 65 4f 4d 44 38 63 39 42 63 30 2b 50 53 58 51 51 49 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6a 43 35 45 59 6f 47 6e 39 4a 68 6c 2b 65 58 [TRUNCATED] Data Ascii: router FreeExit 179.43.159.200 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1hZAdvSJGkbgrAD/Jk+XJbiNo4PcKFIh6m6/3zaF+AuwPGrAQAgBACMLkRigaf0mGX55c+21QKMuSntdehFhz0qe0PSK7mDceOjFRHH7vJ4QC46cPNPGYCKAKzkDPZ3ZW02fDDVY7LYC2kQP2sMOzRSvzmgxuBAVXur+5eOMD8c9Bc0+PSXQQI=-----END ED25519 CERT-----master-key-ed25519 jC5EYoGn9Jhl+eXPttUCjLkp7XXoRYc9KntD0iu5g3Eplatform Tor 0.4.8.10 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 16:25:59fingerprint 5A82 9292 6C5E 5A24 6D35 B843 A729 42FC EC23 5BACuptime 25164563bandwidth 1073741824 1073741824 24652284extra-info-digest 4C82EBF85E068B895D9CED55064E5B5D2374C838 FCBswJVtO1JV5y9tvUpsJQYyDHYI0Q2dkns/ZcrEPBYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKlTxk7HZTUduzD+rhfkL0OgAbjljsB5K6xLQpBq5Av+4AE94c+faVg5zBkggYxFH2mXTrgXBGrA8yjzqrbY0iko5P712E14ljAoRD5AVkf1t85jGCopl1HSyRqndJbiG/sgglOWOHH1ltJNXsYVlObuxRNbeu5KcTca1P [TRUNCATED]
Nov 3, 2024 09:36:07.572355986 CET	212	IN	Data Raw: 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 42 70 70 46 4f 42 74 38 64 4f 45 73 75 4e 31 45 79 4a 30 62 70 79 6a 54 51 Data Ascii: ---signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMBppFOBt8dOEsuN1EyJ0bpyjTQdTBJJj3350JeI2dxZhcv7CUfyIS05jNOwHJ43aXXItaHy6lzZtD6gwd6rjd1pJdjQ29RtEcdT7o1fV38HOqg4xxTLhhebtEIhJGc1+R5+Ay5hN3GJnxywrZKXdWplh9V
Nov 3, 2024 09:36:07.572518110 CET	1236	IN	Data Raw: 7a 6a 72 54 70 46 49 30 55 66 74 76 68 73 77 78 70 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 6f 6e 69 6f 6e 2d 6b 65 79 2d 63 72 6f 73 73 63 65 72 74 0a 2d 2d 2d 2d 2d 42 45 Data Ascii: zjrTpFI0UftvhswxpAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----ItDuDgaYpOgHRZTMHddkUzPHPIYVRQVsBCFQW917ixEpSUi2yvFmaVOboZ8KeyldTIa7vuuy7rwOurA3EvBbh/FNBXpXca8f6sLvtiIxQNW2jfVLQq/5WCArHydjOztJB2mMGEQZvm5h
Nov 3, 2024 09:36:07.572535038 CET	1236	IN	Data Raw: 33 2e 31 35 39 2e 32 30 30 3a 2a 0a 61 63 63 65 70 74 20 2a 3a 32 30 2d 32 33 0a 61 63 63 65 70 74 20 2a 3a 34 33 0a 61 63 63 65 70 74 20 2a 3a 35 33 0a 61 63 63 65 70 74 20 2a 3a 37 39 2d 38 31 0a 61 63 63 65 70 74 20 2a 3a 38 38 0a 61 63 63 65 Data Ascii: 3.159.200:accept :20-23accept :43accept :53accept :79-81accept :88accept :110accept :143accept :194accept :220accept :389accept :443accept :464accept :465accept :531accept :543-544accept :554accept :563accep
Nov 3, 2024 09:36:07.572556973 CET	216	IN	Data Raw: 4e 20 53 49 47 4e 41 54 55 52 45 2d 2d 2d 2d 2d 0a 6e 78 46 6a 41 6a 50 53 7a 43 4c 35 34 65 33 78 50 53 54 71 4b 43 59 65 69 6b 58 59 74 6b 63 50 74 32 43 7a 54 38 79 78 4c 72 51 65 31 35 45 68 4c 42 63 4c 53 71 68 6c 70 57 67 51 43 2b 4c 79 0a Data Ascii: N SIGNATURE-----nxFjAjPSzCL54e3xPSTqKCYeikXYtkcPt2CzT8yxLrQe15EhLBcLSqhlpWgQC+LyUhPFSKf+qnaE5E6Foek1iXsitgHE4iBn3coqVTZUsWTcBxYhn5ZaF3+mxYczlybvQU1WtbOYz5TYAEewBPXh0FesQdQ/X6Vs5mNNhYWQPPM=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	58492	193.23.244.244	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:09.364368916 CET	175	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	58498	45.66.35.11	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:10.453960896 CET	172	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:36:11.498451948 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:36:11 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:36:11 GMT Data Raw: 72 6f 75 74 65 72 20 70 75 6e 69 73 68 65 72 20 38 31 2e 37 39 2e 34 35 2e 31 38 34 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 65 64 41 63 64 46 70 79 2f 47 44 76 65 4b 44 47 44 50 63 5a 57 72 46 78 36 45 4b 48 50 4d 77 57 52 4c 31 71 72 76 62 30 45 49 6d 66 5a 57 41 51 41 67 42 41 44 48 74 59 37 64 0a 32 4d 6f 68 55 31 63 58 63 57 34 6d 4d 58 48 67 4e 50 30 6a 6d 41 52 44 4d 77 63 58 66 70 6b 31 52 72 5a 43 76 6b 65 4d 70 6c 45 7a 6a 76 77 57 5a 74 4d 6b 77 38 6d 33 73 50 56 4b 38 39 45 73 0a 33 49 4c 58 6d 6b 45 77 62 37 6d 44 57 43 74 79 6f 50 32 6f 72 30 4b 2b 58 6d 68 31 68 30 6f 36 41 56 71 45 2f 73 47 77 72 70 36 66 44 35 52 78 69 79 66 71 6c 31 72 43 76 67 30 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 78 37 57 4f 33 64 6a 4b 49 56 4e 58 46 33 46 75 4a [TRUNCATED] Data Ascii: router punisher 81.79.45.184 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1edAcdFpy/GDveKDGDPcZWrFx6EKHPMwWRL1qrvb0EImfZWAQAgBADHtY7d2MohU1cXcW4mMXHgNP0jmARDMwcXfpk1RrZCvkeMplEzjvwWZtMkw8m3sPVK89Es3ILXmkEwb7mDWCtyoP2or0K+Xmh1h0o6AVqE/sGwrp6fD5Rxiyfql1rCvg0=-----END ED25519 CERT-----master-key-ed25519 x7WO3djKIVNXF3FuJjFx4DT9I5gEQzMHF36ZNUa2Qr4platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 02:26:25fingerprint 5A91 4CC3 19F0 6AE7 262E E441 FF31 D188 B483 1077uptime 910148bandwidth 524288 1048576 657461extra-info-digest 51A9775FC7D0478CA7056F8D75D39E9328EF7A09 DbSGaNnZaKjPS0ZP/JH+z5n9jJojVm7WsaST9Qh4nasonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK4hS2VfKtt/UdC+4wYsxHWajC/v3qKqwr6vvNJDsJsaPEce414LFRhgzoRaWGwYSOkG2hdRCL1NZFlaXN9srvw1tHX3dD3dFwTvtVXj1bKyz5XnHi1kWVUtjBaj4hLHPkhWIfQQPIpdMe1NjQGo1B3DaPHuKvDiysj94XuOjj0vAgMBAAE [TRUNCATED]
Nov 3, 2024 09:36:11.498467922 CET	764	IN	Data Raw: 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4e 75 39 61 38 35 34 4f 61 50 74 4d 76 66 63 47 4e 4e 75 4a 58 54 30 68 43 52 52 49 6f 6e 66 4d 56 4a 62 73 67 4a Data Ascii: ey-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMNu9a854OaPtMvfcGNNuJXT0hCRRIonfMVJbsgJlQDDuVxUkXiVj1zBhPZ12TlwtVWu7oL4NXPlKt2U+Ea4ow9K/lmzwanr7s+aE5jHNhcNthOllm6WZoqe0NXndlOW1LvR895DK8O+pK1rNo/44ypNsGZqRo4nCYyPWsFoLgJfAgMBAAE=-----END RSA PUBLI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	58512	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:13.409082890 CET	175	OUT	GET /tor/server/fp/1017aee3a184283ae65e7b2a0049cca1490ed7c5 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	58521	216.218.219.41	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:15.196023941 CET	175	OUT	GET /tor/server/fp/1017aee3a184283ae65e7b2a0049cca1490ed7c5 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	58527	193.23.244.244	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:15.973056078 CET	175	OUT	GET /tor/server/fp/1017aee3a184283ae65e7b2a0049cca1490ed7c5 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	58534	216.218.219.41	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:17.307956934 CET	175	OUT	GET /tor/server/fp/124e9120c4ea486f350695a66ab2e75bac1d9036 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	58539	45.66.35.11	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:18.074362993 CET	172	OUT	GET /tor/server/fp/124e9120c4ea486f350695a66ab2e75bac1d9036 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:36:19.120434999 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:36:18 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:36:18 GMT Data Raw: 72 6f 75 74 65 72 20 43 61 62 61 61 6c 54 6f 72 52 65 6c 61 79 31 20 31 35 35 2e 32 34 38 2e 32 32 37 2e 32 31 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 5a 6f 41 53 54 59 37 35 71 54 67 76 58 4c 66 42 47 64 32 75 41 41 51 62 4c 6f 68 6f 70 42 43 42 30 44 6f 6d 51 6e 57 79 54 33 57 68 41 56 41 51 41 67 42 41 43 38 58 52 69 69 0a 58 67 53 65 4d 2b 70 65 36 33 75 6f 76 6e 42 67 31 79 71 70 4a 66 41 56 65 79 4c 46 65 2f 44 4a 44 5a 4d 47 57 78 7a 44 42 33 74 61 69 76 42 56 55 78 53 75 33 2b 30 49 65 51 44 56 55 73 64 67 0a 57 6a 34 37 79 6d 2b 64 61 65 51 48 38 33 4d 31 48 64 50 4f 49 4f 32 45 67 55 41 53 74 54 64 31 43 48 38 73 77 46 69 57 7a 4b 70 30 51 66 70 52 6e 6e 32 47 45 46 4a 7a 45 51 38 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 76 46 30 59 6f 6c 34 [TRUNCATED] Data Ascii: router CabaalTorRelay1 155.248.227.210 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1ZoASTY75qTgvXLfBGd2uAAQbLohopBCB0DomQnWyT3WhAVAQAgBAC8XRiiXgSeM+pe63uovnBg1yqpJfAVeyLFe/DJDZMGWxzDB3taivBVUxSu3+0IeQDVUsdgWj47ym+daeQH83M1HdPOIO2EgUAStTd1CH8swFiWzKp0QfpRnn2GEFJzEQ8=-----END ED25519 CERT-----master-key-ed25519 vF0Yol4EnjPqXut7qL5wYNcqqSXwFXsixXvwyQ2TBlsor-address [2603:c023:4003:7f43:6162:6161:6c54:6f72]:9001platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 03:02:51fingerprint 124E 9120 C4EA 486F 3506 95A6 6AB2 E75B AC1D 9036uptime 6364935bandwidth 1073741824 1073741824 12921676extra-info-digest F84BA86F19D2C914007CA1BF10257A1481DEDF07 H6gxx2bfBs2syFSzjR+J2zxSCTzESzMQmTw4gSzw5iEonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK+f9pFcNaSbXCG9DVGHnIrwk0nOHeG61t7RYgbyKwjdSaeoYJCx9iM1B+GY2A1zgzFbjMvpwcj5TFaoWr2zrUhv2P++UKhOx0C1AH [TRUNCATED]
Nov 3, 2024 09:36:19.120471001 CET	1236	IN	Data Raw: 34 56 7a 64 51 66 6e 50 68 68 70 76 33 4e 39 43 76 6f 57 36 5a 34 51 50 54 70 45 4a 4c 34 4c 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d Data Ascii: 4VzdQfnPhhpv3N9CvoW6Z4QPTpEJL4LAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANDjjX8iVgGXjtxBMM+uOg4t2rVKH0QY6jb9R/GQm2AVxi8nuPul/00YRwSRW3lFSrICGp3SMvJo13kTn4LtFthk2YNQ15m1vb7KY/CQjwTAo2ajdTRj0DiOd
Nov 3, 2024 09:36:19.120484114 CET	181	IN	Data Raw: 48 75 54 32 62 57 41 2f 65 5a 67 6c 49 43 42 72 75 64 42 4c 32 52 35 69 34 43 47 4b 65 70 4c 59 36 51 72 42 36 70 32 34 4e 37 4c 49 36 57 0a 49 70 4d 4e 67 54 67 48 2f 31 50 62 38 50 39 6b 78 78 43 55 75 2b 6c 6c 49 51 57 32 71 49 61 56 4c 50 6f Data Ascii: HuT2bWA/eZglICBrudBL2R5i4CGKepLY6QrB6p24N7LI6WIpMNgTgH/1Pb8P9kxxCUu+llIQW2qIaVLPopElvYT432YOmNdUp9BzHZ0vwPnOf+1YCRGIIdcNkNypgAQn6+67JTiN6K3tJlwXqoWGOY4i8=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	58542	193.23.244.244	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:18.705353022 CET	175	OUT	GET /tor/server/fp/04f93654100048d48fb8d21eb8434350e94b72a4 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	58543	45.66.35.11	80	6220	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:19.572884083 CET	172	OUT	GET /tor/server/fp/0d7661a33eb9ca44bec3109dbec7f9c5e8abfb02 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:36:20.634531021 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:36:20 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:36:20 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 32 2e 35 38 2e 35 36 2e 34 33 20 39 31 30 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 64 4b 4d 38 6c 7a 6b 62 37 68 64 64 62 61 77 63 4c 42 7a 39 34 72 4a 52 44 78 54 35 6a 2b 4b 45 41 6a 6a 67 30 45 79 59 69 45 42 41 51 41 67 42 41 43 4e 79 36 59 66 0a 58 39 61 38 75 4e 76 49 73 37 4e 47 37 43 74 6f 71 5a 4f 6d 48 65 5a 69 62 4e 72 68 36 33 72 45 58 4b 78 32 4c 75 5a 79 75 75 66 6c 75 50 69 78 58 46 56 5a 33 39 43 37 4c 35 30 6e 64 58 34 6c 0a 36 51 2f 32 74 6c 67 4e 4e 6d 70 46 6f 36 32 34 66 75 39 4e 76 50 4f 35 63 56 55 69 4b 50 31 53 6b 55 59 63 72 4e 68 79 6d 59 44 35 6b 41 43 36 30 37 37 34 4c 5a 5a 74 52 77 73 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6a 63 75 6d 48 31 2f 57 76 4c 6a 62 79 4c 4f [TRUNCATED] Data Ascii: router Quetzalcoatl 2.58.56.43 9100 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAdKM8lzkb7hddbawcLBz94rJRDxT5j+KEAjjg0EyYiEBAQAgBACNy6YfX9a8uNvIs7NG7CtoqZOmHeZibNrh63rEXKx2LuZyuufluPixXFVZ39C7L50ndX4l6Q/2tlgNNmpFo624fu9NvPO5cVUiKP1SkUYcrNhymYD5kAC60774LZZtRws=-----END ED25519 CERT-----master-key-ed25519 jcumH1/WvLjbyLOzRuwraKmTph3mYmza4et6xFysdi4or-address [2a12:a800:1:1:2:58:56:43]:9100platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 15:20:52fingerprint 0D76 61A3 3EB9 CA44 BEC3 109D BEC7 F9C5 E8AB FB02uptime 298843bandwidth 1073741824 1073741824 11483567extra-info-digest BFE2F0A33F06214A340EAB2D548EA1AC91F74271 iLWPH8px4ZjGvEdsybxZ+lGFvGiW+9uetJxdJ4Y4Ipwonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAO50ckzD0PPS/FsyYYzwJlX8gDIjrHXx6MQFUxBNHAOUs5um2MMzxdIKb9Gyw5hYN3QiXol5W5Htwq+XZ648NgF+l8OaZuZXOdYTqFRk7aZw9SabfeI8neuyOeKiz [TRUNCATED]
Nov 3, 2024 09:36:20.634555101 CET	1236	IN	Data Raw: 77 77 4f 55 30 4d 72 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 Data Ascii: wwOU0MrAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK839i8rxYIB1glwvSIsTeJuNkbYN6/9Sh/m7KLk7KXn1tvV4zuBhlYo2FfjByjYhDYZHPqIvQtkexHyavA2C43HIeOgqNwzUktH+NZlwXJvlA6eoJUY5/AAdRumZqyLvoCFF2xYePHIDxiDw
Nov 3, 2024 09:36:20.634566069 CET	424	IN	Data Raw: 41 32 32 38 32 37 45 33 43 34 36 20 24 30 41 37 36 43 30 41 30 41 37 32 31 44 44 42 43 33 32 34 42 37 30 35 41 44 42 46 43 39 35 46 44 38 30 36 41 45 38 35 35 20 24 30 41 46 39 38 32 43 43 37 31 41 30 31 44 39 35 45 38 39 35 39 44 37 36 33 44 30 Data Ascii: A22827E3C46 $0A76C0A0A721DDBC324B705ADBFC95FD806AE855 $0AF982CC71A01D95E8959D763D0EC0E5A6C61244 $0B5BC76B3BE7553B229FD3E73F26AED41C31DD19 $0B8EF5F5016926F4245350FB37914E30BF36C528 $0CD666F9C9A40A8CFB1E6B9465597A51D3A1CBF8 $0CF48696F004482C445D
Nov 3, 2024 09:36:20.634577990 CET	1236	IN	Data Raw: 33 35 33 32 35 34 31 20 24 31 32 37 45 38 30 33 38 38 38 44 38 32 46 33 33 43 43 33 43 33 31 31 45 43 43 36 43 43 45 42 37 37 30 38 38 33 31 43 42 20 24 31 33 30 43 46 43 46 33 38 42 41 33 33 32 37 45 33 30 30 31 41 31 44 42 32 41 34 42 35 41 43 Data Ascii: 3532541 $127E803888D82F33CC3C311ECC6CCEB7708831CB $130CFCF38BA3327E3001A1DB2A4B5ACBDAE248D9 $13CADC9E09F30AF24A98B44E88323DB655A803E9 $13FBC97516DC854399E70BC7CA9A4513FFD4F08C $140E4FC6202FE17F46337058FC9848FA9055482B $149E584199DAD5966FADAA07
Nov 3, 2024 09:36:20.634592056 CET	1236	IN	Data Raw: 42 46 34 45 36 35 45 39 45 42 32 43 43 45 34 33 44 31 33 32 45 45 37 46 41 41 46 33 30 39 33 20 24 32 45 42 38 39 37 35 37 46 31 44 38 32 32 38 37 38 34 33 33 35 32 33 32 45 32 43 45 32 39 38 39 44 32 32 30 45 35 39 30 20 24 32 45 43 35 45 45 33 Data Ascii: BF4E65E9EB2CCE43D132EE7FAAF3093 $2EB89757F1D8228784335232E2CE2989D220E590 $2EC5EE348BD8D9D2E518B2CAEA9C671E2D5F77A6 $2EF3F194E34705F9E13021BAC7B394653329243A $2EFC2B8BC724CF435C14066087936BE7CA3C57A3 $30C472441D910A8BCDA571F2637C80119E76D082 $
Nov 3, 2024 09:36:20.634603977 CET	1236	IN	Data Raw: 41 43 42 38 33 39 35 42 33 37 34 31 31 20 24 33 45 46 41 37 42 30 32 35 39 36 39 31 36 43 41 37 46 46 35 39 43 37 41 33 41 37 41 38 41 38 44 35 36 42 37 41 31 45 38 20 24 33 46 33 38 43 31 37 43 31 31 42 34 33 35 36 32 37 36 36 42 35 30 41 39 35 Data Ascii: ACB8395B37411 $3EFA7B02596916CA7FF59C7A3A7A8A8D56B7A1E8 $3F38C17C11B43562766B50A95366B021CBCC7ADA $3F6E66FDA54B0CED35F01A16AF5D034DDDD8D48C $409BD5AEC15BF5D2B983C6F064D852B0ADE0C8BD $410C2D96F0749813FDBBB15D079FC03BAEF6BFD1 $42708A12892506EBCD
Nov 3, 2024 09:36:20.634615898 CET	1236	IN	Data Raw: 36 32 39 39 33 36 35 31 38 32 31 34 44 43 46 43 46 37 38 34 45 38 37 35 44 30 45 42 45 35 32 45 30 35 35 32 44 20 24 35 34 36 38 37 44 35 39 46 38 43 38 44 39 30 30 35 36 43 41 39 34 38 34 39 39 37 30 42 33 36 32 44 41 33 38 35 44 41 44 20 24 35 Data Ascii: 629936518214DCFCF784E875D0EBE52E0552D $54687D59F8C8D90056CA94849970B362DA385DAD $552C2E2AFDD1B740A38CA9768C51EC011B2AF701 $555A6B7CB3D8ECA376B4CB6701596A7B211E21D3 $56D878C942CD38F5287079974950668B18ECC4CD $5756D9C403D89B79AFE69D50BB0682BA3183
Nov 3, 2024 09:36:20.634628057 CET	1236	IN	Data Raw: 45 38 43 36 31 45 37 32 34 42 44 34 36 36 43 45 38 41 30 20 24 36 34 36 42 34 45 33 39 42 34 39 46 33 30 33 42 34 42 35 35 32 41 38 46 33 43 42 42 38 46 43 44 34 30 42 45 37 45 42 35 20 24 36 34 44 39 30 39 35 39 45 35 30 44 35 39 33 44 38 30 41 Data Ascii: E8C61E724BD466CE8A0 $646B4E39B49F303B4B552A8F3CBB8FCD40BE7EB5 $64D90959E50D593D80ACD0E29A2BE9051EB66EEA $656BA6C00B21DB086611171C946288A29E2DF5BC $659B0645A1C264D9D8FF4C9DD2B08ADAC392D475 $65A398E9A697A4645937B086CDA1D9A5C57B9509 $676C3E3C4282
Nov 3, 2024 09:36:20.634640932 CET	1236	IN	Data Raw: 44 20 24 37 36 34 34 42 35 37 44 44 38 36 33 30 35 46 33 42 38 31 37 32 46 45 46 36 43 45 45 38 35 38 36 34 44 30 38 38 42 41 37 20 24 37 36 42 41 43 43 39 30 43 42 41 37 31 37 31 34 39 31 38 35 35 34 31 35 36 43 41 41 42 45 39 35 35 45 37 41 39 Data Ascii: D $7644B57DD86305F3B8172FEF6CEE85864D088BA7 $76BACC90CBA71714918554156CAABE955E7A940F $76CA419C68502FFC4D950D167E25EE0AD3A0A764 $77313C32AA48AB658299DA039DF6C627C126F570 $77D53F8C9545D1E6A4D3532E9E2D8474460933B9 $799F36F3EAD423C23E76351154E0BC
Nov 3, 2024 09:36:20.634653091 CET	1236	IN	Data Raw: 46 30 34 32 37 44 34 41 31 35 38 45 37 31 44 36 32 45 32 31 45 30 37 36 36 20 24 38 44 34 36 33 39 46 31 33 35 43 39 30 38 45 42 39 33 42 34 32 32 34 42 41 37 31 39 31 38 34 45 41 41 31 45 36 44 30 35 20 24 38 45 32 32 44 37 35 44 34 39 45 46 42 Data Ascii: F0427D4A158E71D62E21E0766 $8D4639F135C908EB93B4224BA719184EAA1E6D05 $8E22D75D49EFBBEA1D719976D5A78750B2C0C227 $8E477758547F612659BD2864C91D641452833369 $8EAE810FA33F26341605D59F82D8AD58F7EA6CC5 $8EEDA34CE6D6E605ED3179278F45882654923280 $90857E
Nov 3, 2024 09:36:20.639492989 CET	1236	IN	Data Raw: 35 45 41 31 45 45 42 20 24 41 31 35 36 37 36 46 35 46 30 46 32 42 41 37 42 31 43 41 35 34 34 34 36 44 44 42 34 36 42 45 45 36 46 36 39 39 41 39 35 20 24 41 31 41 42 31 33 34 31 32 33 46 39 46 35 33 34 43 37 45 30 39 42 36 38 34 31 41 37 45 43 41 Data Ascii: 5EA1EEB $A15676F5F0F2BA7B1CA54446DDB46BEE6F699A95 $A1AB134123F9F534C7E09B6841A7ECAFD0282240 $A1F57EBAAC183C6B0A49E62E5B23E8C1BB6C1022 $A4F42AE65F11634C42A3F3952E719F47091BD36F $A5BBC2C61B1F6B09097011C4CE56BBE57DE5AC92 $A6191F3949C33923923B5CCA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	58544	193.23.244.244	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:19.780057907 CET	175	OUT	GET /tor/server/fp/04f93654100048d48fb8d21eb8434350e94b72a4 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	58546	45.66.35.11	80	1488	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:20.840493917 CET	172	OUT	GET /tor/server/fp/04f93654100048d48fb8d21eb8434350e94b72a4 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	58549	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:26.272592068 CET	175	OUT	GET /tor/server/fp/c0a86709d4ae38e879426549660e1ad18cc500cd HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	58550	45.66.35.11	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:28.354772091 CET	172	OUT	GET /tor/server/fp/c0a86709d4ae38e879426549660e1ad18cc500cd HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:36:29.404445887 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:36:29 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:36:29 GMT Data Raw: 72 6f 75 74 65 72 20 61 72 74 69 6b 65 6c 31 30 62 65 72 31 32 20 31 38 35 2e 32 32 30 2e 31 30 31 2e 33 20 39 30 30 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 58 6c 41 54 77 75 41 6b 53 5a 4a 41 66 58 57 41 79 64 4f 70 4d 4d 55 69 6c 6f 4e 34 42 4a 45 4c 33 56 44 46 49 41 58 2b 32 74 6c 61 55 49 41 51 41 67 42 41 43 54 39 4b 58 74 0a 7a 4e 62 43 6d 38 52 39 61 6f 30 53 76 4c 56 52 2b 4e 35 67 34 43 4d 36 41 36 38 71 46 37 6e 4f 74 76 6a 53 2b 56 4a 62 49 66 37 6b 47 57 49 49 4b 41 48 4c 74 48 47 71 79 63 55 73 76 53 39 73 0a 47 6c 45 76 6e 50 4d 76 61 66 59 30 30 51 66 53 32 77 69 4a 7a 44 75 32 43 4e 38 41 4a 61 6a 38 41 65 35 63 32 77 32 61 6c 71 58 37 4b 6a 62 62 66 70 50 6a 42 49 56 6c 37 77 4d 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6b 2f 53 6c 37 63 7a 57 77 70 [TRUNCATED] Data Ascii: router artikel10ber12 185.220.101.3 9004 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1XlATwuAkSZJAfXWAydOpMMUiloN4BJEL3VDFIAX+2tlaUIAQAgBACT9KXtzNbCm8R9ao0SvLVR+N5g4CM6A68qF7nOtvjS+VJbIf7kGWIIKAHLtHGqycUsvS9sGlEvnPMvafY00QfS2wiJzDu2CN8AJaj8Ae5c2w2alqX7KjbbfpPjBIVl7wM=-----END ED25519 CERT-----master-key-ed25519 k/Sl7czWwpvEfWqNEry1UfjeYOAjOgOvKhe5zrb40vkor-address [2a0b:f4c2::3]:9004platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:33:30fingerprint C0A8 6709 D4AE 38E8 7942 6549 660E 1AD1 8CC5 00CDuptime 64808bandwidth 1073741824 1073741824 27642880extra-info-digest DB596C261678E7F6EDE07D0C9949A82FA9260EA7 +QzfOek/nu2FOh3i7aELsXbP53DxUhp5SSjPF8RglcIonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALWTlcXw/FrrIxLpUgKgbKBcJbsLHpG006Nyyr+onhutAah3dG1E6Xo94Z53ShvWk6pL7gHk7U217My1d4tNsN7h6XsqpqJNpNvJccKK4mZdmiteGJyssSpxe/atDD8sIZ3iC [TRUNCATED]
Nov 3, 2024 09:36:29.404468060 CET	1236	IN	Data Raw: 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 Data Ascii: gMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMjuUI9aIcjlBZTcUvz8+lF5RvKm3sKsmgViUFwSk0BCkE3XFmnxJtTpwVmC9VkFc4Z5Bh26FsamX6luXCLVnJSXG2fVwRmNSH70oiGt96cAXgF9ZhFpCA6V536l87+4kALe1mZ0/IFhvIqb1StKj/Xb9
Nov 3, 2024 09:36:29.404480934 CET	976	IN	Data Raw: 33 44 46 20 24 31 36 38 41 32 46 44 39 36 44 42 35 38 43 41 45 32 37 36 42 42 38 33 31 37 38 45 37 34 39 37 31 37 42 33 31 44 39 43 34 20 24 31 37 42 31 45 46 38 35 31 30 35 38 45 31 34 32 33 33 45 43 44 39 45 35 39 32 32 46 46 36 33 31 36 38 33 Data Ascii: 3DF $168A2FD96DB58CAE276BB83178E749717B31D9C4 $17B1EF851058E14233ECD9E5922FF6316834FDA6 $19CCB7D946802677768364E2984A998E78956DB9 $1B18F98534634EF4EB4B36523F052F4D829E0496 $1DC1A8B7A5F9E67BF75A144E496203F87E2EBC27 $1FF2AE9C9BD4A0C129582D62CA77
Nov 3, 2024 09:36:29.404536009 CET	1236	IN	Data Raw: 46 38 33 39 33 37 45 33 30 33 43 34 46 34 43 30 38 35 31 31 32 46 37 33 30 36 31 41 42 32 33 41 31 39 31 20 24 34 39 43 31 44 37 31 44 41 43 33 37 37 38 32 41 39 30 34 31 32 38 37 41 31 36 35 33 35 35 30 31 35 45 35 46 42 35 30 42 20 24 34 41 30 Data Ascii: F83937E303C4F4C085112F73061AB23A191 $49C1D71DAC37782A9041287A165355015E5FB50B $4A08F978852B3CC5DB325528A77B75E46BA82960 $4A531AA712A3DF0A90EB42711EEBE90B6918B37A $4AA7454F39A590925C1E8728E5F2C1DE69840441 $4AF7E405D19FA92A92903AF287C2AB4D25A302
Nov 3, 2024 09:36:29.404552937 CET	1236	IN	Data Raw: 36 30 33 42 31 34 36 37 31 39 33 38 30 35 42 30 36 20 24 36 42 35 45 42 43 37 38 35 37 32 45 33 42 35 44 42 31 39 42 31 33 39 41 43 45 31 44 37 42 46 43 41 32 45 42 37 38 36 45 20 24 36 42 37 36 32 46 39 38 44 31 34 30 39 33 45 43 33 36 46 44 35 Data Ascii: 603B1467193805B06 $6B5EBC78572E3B5DB19B139ACE1D7BFCA2EB786E $6B762F98D14093EC36FD5055897E49331E579D6D $6C64100D8F7050E76F420CE404031EABC7101124 $6C9FC66A7E03BBC3970BCD7FB6A8BC3037F2DEB5 $6D43A91AFE734C5B3DC500953BC9CD2B2FA45200 $6E3DD22CF40499
Nov 3, 2024 09:36:29.404563904 CET	1236	IN	Data Raw: 24 39 39 45 31 35 32 43 44 42 31 32 46 35 41 42 42 45 30 38 43 30 41 32 45 41 35 42 31 32 36 43 44 33 46 31 46 41 43 35 46 20 24 39 41 33 30 37 36 43 35 45 42 38 44 38 35 31 35 30 42 36 43 41 36 41 42 38 31 46 39 44 33 35 37 39 30 39 31 36 35 39 Data Ascii: $99E152CDB12F5ABBE08C0A2EA5B126CD3F1FAC5F $9A3076C5EB8D85150B6CA6AB81F9D3579091659A $9E5680B3F5C2CA768F282C85DBAA11732D7456D4 $9E6310CF67A32012E01EF18B82AB642BF6EB2BC9 $9F2CF2A8221FDE4BE29A677EA5AB27F2EA2EA24B $9FE8CB4B152D5FD340AA2B307356560A
Nov 3, 2024 09:36:29.404577017 CET	1236	IN	Data Raw: 33 33 44 39 36 37 46 42 41 38 32 30 34 35 41 41 45 32 37 39 30 43 45 20 24 43 46 34 30 45 36 35 30 38 30 36 32 46 32 44 30 37 34 46 32 45 31 42 42 38 43 41 32 46 30 38 33 42 35 44 38 33 36 41 43 20 24 44 30 34 33 31 37 42 46 35 43 37 36 39 34 43 Data Ascii: 33D967FBA82045AAE2790CE $CF40E6508062F2D074F2E1BB8CA2F083B5D836AC $D04317BF5C7694CE5914E17CBECFAAC88348579D $D05A0018EA3F64545DADBA928BA0DC80180A2765 $D11A59E952775B7A5D6F23FADF80B95149E35B42 $D1E5C406D14429BD36BACC6EEE64E6B8C5833E7B $D2F15E74
Nov 3, 2024 09:36:29.404588938 CET	1236	IN	Data Raw: 41 32 33 37 38 20 24 46 41 39 44 39 41 38 33 34 44 42 39 38 34 43 35 33 33 45 39 44 33 38 30 36 46 30 33 32 30 33 38 46 39 38 32 32 34 44 34 20 24 46 42 34 41 30 45 34 46 34 37 30 42 33 36 45 37 41 38 39 31 35 39 41 38 35 36 39 35 33 30 41 34 37 Data Ascii: A2378 $FA9D9A834DB984C533E9D3806F032038F98224D4 $FB4A0E4F470B36E7A89159A8569530A47C292BA5 $FB6CB5621471A823C79737A765788A50015C81A6 $FBC3CB1C8B14E52D2EDD3BFF9B50D5D82114BE12 $FE4698A033E5442C6C1D1B97961FA183BFBC7B99 $FE47CACA53BA10081DE464014D
Nov 3, 2024 09:36:29.404601097 CET	441	IN	Data Raw: 31 39 34 2c 32 30 38 36 2c 33 36 39 30 2c 35 32 32 32 2c 35 32 36 39 2c 38 30 30 38 2c 38 30 38 30 2c 38 30 38 32 2c 38 32 33 32 2d 38 32 33 33 2c 38 33 33 32 2d 38 33 33 33 2c 38 34 34 33 2c 39 34 31 38 2c 31 31 33 37 31 2c 31 39 32 39 34 2c 35 Data Ascii: 194,2086,3690,5222,5269,8008,8080,8082,8232-8233,8332-8333,8443,9418,11371,19294,50002,64738router-sig-ed25519 /wDagMfuJsw3u4Je3xrJxjmfBmulqvfZO73jqQut87xJklv0EWXw2sE/WlL9O3EnRfZtjpGsO/vravnstPBWAArouter-signature-----BEGIN SIGNATURE-----I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	58551	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:30.056241035 CET	175	OUT	GET /tor/server/fp/19c64af24e40c2ce5e3ca5231509213230b46f70 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	58552	216.218.219.41	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:31.112550020 CET	175	OUT	GET /tor/server/fp/19c64af24e40c2ce5e3ca5231509213230b46f70 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:36:31.872502089 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:36:31 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:36:31 GMT Data Raw: 72 6f 75 74 65 72 20 63 30 77 62 30 79 20 32 30 35 2e 31 38 35 2e 31 32 31 2e 31 37 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 68 59 41 63 48 47 78 78 31 6a 47 4d 57 4f 54 32 51 54 4a 7a 74 6e 56 77 50 51 59 64 49 36 77 4f 57 33 30 50 49 34 46 31 74 42 46 66 32 70 41 51 41 67 42 41 42 75 57 33 2b 75 0a 31 46 4d 45 36 34 69 2b 6f 6d 35 4a 4f 2f 67 76 6e 34 35 39 78 6e 71 34 36 36 4f 61 73 57 45 65 62 34 4f 4b 6f 78 47 65 4d 47 6b 33 47 32 46 73 53 71 35 4d 75 54 76 39 44 2b 67 78 67 65 68 4d 0a 78 4d 42 64 69 33 58 5a 56 39 75 44 73 6f 34 45 7a 48 39 6a 77 37 70 79 69 70 52 69 6b 78 78 4c 36 51 31 76 6a 6e 67 54 4b 45 7a 54 34 34 63 67 44 6b 73 6c 4c 48 79 63 44 67 49 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 62 6c 74 2f 72 74 52 54 42 4f 75 49 76 71 4a 75 [TRUNCATED] Data Ascii: router c0wb0y 205.185.121.170 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1hYAcHGxx1jGMWOT2QTJztnVwPQYdI6wOW30PI4F1tBFf2pAQAgBABuW3+u1FME64i+om5JO/gvn459xnq466OasWEeb4OKoxGeMGk3G2FsSq5MuTv9D+gxgehMxMBdi3XZV9uDso4EzH9jw7pyipRikxxL6Q1vjngTKEzT44cgDkslLHycDgI=-----END ED25519 CERT-----master-key-ed25519 blt/rtRTBOuIvqJuSTv4L5+OfcZ6uOujmrFhHm+DiqMplatform Tor 0.4.8.10 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 00:10:55fingerprint 19C6 4AF2 4E40 C2CE 5E3C A523 1509 2132 30B4 6F70uptime 15764847bandwidth 1073741824 1073741824 7709290extra-info-digest 8932B4C557062846F51A40C6C841271AF716EDB7 6eTnOwKZT4yuQ69oV6045r8gPdhNKd5VVre74UYIZFoonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALxDFXjMK5g/i9U6wApFDd2c+ZFZcf3dTZFzz3j1klAsx4eG63uK061eyvlNkoz0k8i5x6xyB3o4MdCF3u2MrKQ1JuB8jz4Jhx+4wfQ+FEBYiPWFzy47qed9XW+VdlEshdruZ4ASo2dQHF9gN/DbfypkD6kQEVQFuZX5u5/k [TRUNCATED]
Nov 3, 2024 09:36:31.872535944 CET	1236	IN	Data Raw: 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 41 42 70 64 4f 4d 5a 7a 35 57 62 34 41 6c 49 5a 31 42 61 36 52 39 79 37 6c 65 32 Data Ascii: -signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANABpdOMZz5Wb4AlIZ1Ba6R9y7le2qHpxkZQIuN7MK5WnEJr0wB/gfhofXscfnU60fDHzLaSQgvXvnsbKV6rSBJg+I0QwgdnA8v619EkHtRYIJ2nrc7F/G6gtevJ/T2k776ggWOQMMWmUcjFUhu8911Adnqv2hVnp1Qqj/5SiMzxAgMBAAE=-----EN
Nov 3, 2024 09:36:31.872549057 CET	1236	IN	Data Raw: 65 70 74 20 2a 3a 35 35 34 0a 61 63 63 65 70 74 20 2a 3a 35 36 33 0a 61 63 63 65 70 74 20 2a 3a 35 38 37 0a 61 63 63 65 70 74 20 2a 3a 36 33 36 0a 61 63 63 65 70 74 20 2a 3a 37 30 36 0a 61 63 63 65 70 74 20 2a 3a 37 34 39 0a 61 63 63 65 70 74 20 Data Ascii: ept :554accept :563accept :587accept :636accept :706accept :749accept :853accept :873accept :902-904accept :981accept :989-990accept :991accept :992accept :993accept :994accept :995accept :1194accept :1220ac
Nov 3, 2024 09:36:31.872560024 CET	440	IN	Data Raw: 38 32 33 33 2c 38 33 33 32 2d 38 33 33 33 2c 38 34 34 33 2c 38 38 38 38 2c 39 34 31 38 2c 39 39 39 39 2d 31 30 30 30 30 2c 31 31 33 37 31 2c 31 39 32 39 34 2c 31 39 36 33 38 2c 35 30 30 30 32 2c 36 34 37 33 38 0a 74 75 6e 6e 65 6c 6c 65 64 2d 64 Data Ascii: 8233,8332-8333,8443,8888,9418,9999-10000,11371,19294,19638,50002,64738tunnelled-dir-serverrouter-sig-ed25519 1KkXfm7j/ljCAUzRM1briJkpZe0AQOH2awEXR0BfunuWBdiSnqE6YVHKUuA+m1qkJlyKgwZxUBNzLJd1BCKKDArouter-signature-----BEGIN SIGNATURE-----x3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	58554	216.218.219.41	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:42.304800987 CET	175	OUT	GET /tor/server/fp/5378983bc20642c22bd3a4db04445f759ebc09e3 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:36:43.520889044 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:36:43 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:36:43 GMT Data Raw: 72 6f 75 74 65 72 20 4e 54 48 33 37 52 37 20 31 39 32 2e 34 32 2e 31 31 36 2e 31 38 39 20 39 30 30 36 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 62 43 41 54 54 6a 67 63 6d 6a 7a 4b 2b 69 71 42 75 64 34 53 33 48 45 7a 61 63 50 6e 47 66 42 67 4e 47 64 66 75 38 6e 4a 62 43 4b 67 38 38 41 51 41 67 42 41 42 49 6d 6c 73 41 0a 6f 65 5a 55 61 44 69 32 37 4c 42 6e 43 30 31 45 71 6d 4a 71 4f 6a 48 2b 41 69 44 68 53 49 35 41 45 66 51 43 67 57 42 39 6a 51 7a 6c 5a 6d 5a 41 64 64 74 57 46 45 69 4b 75 4b 48 73 57 56 4f 48 0a 73 37 65 38 63 72 2b 59 31 71 2f 56 70 50 67 64 52 4f 62 59 56 50 6b 4d 37 45 4c 6e 43 76 37 54 2b 35 36 33 66 55 55 37 4e 78 7a 43 66 34 6f 42 35 73 4d 78 4d 4b 76 6b 56 77 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 53 4a 70 62 41 4b 48 6d 56 47 67 34 74 75 79 77 [TRUNCATED] Data Ascii: router NTH37R7 192.42.116.189 9006 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1bCATTjgcmjzK+iqBud4S3HEzacPnGfBgNGdfu8nJbCKg88AQAgBABImlsAoeZUaDi27LBnC01EqmJqOjH+AiDhSI5AEfQCgWB9jQzlZmZAddtWFEiKuKHsWVOHs7e8cr+Y1q/VpPgdRObYVPkM7ELnCv7T+563fUU7NxzCf4oB5sMxMKvkVw4=-----END ED25519 CERT-----master-key-ed25519 SJpbAKHmVGg4tuywZwtNRKpiajox/gIg4UiOQBH0AoEor-address [2001:67c:6ec:203:192:42:116:189]:9006platform Tor 0.4.8.12 on FreeBSDproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 20:30:18fingerprint 5378 983B C206 42C2 2BD3 A4DB 0444 5F75 9EBC 09E3uptime 1749743bandwidth 1073741824 1073741824 38742494extra-info-digest 302A13B73F07ED5355F3EC5EE180357D9952D623 otYeOomQhw8BBTvk7aRCmc2HyOf2E6FEkWiul5c7Qq4onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKIF4A5XjmG3OMe+zhkLSWUQun/s/DF72tBgAZFjiu9lP3AInEuKjL/7G/iyT22TAzeGnyWNgQeBWl1d1nnDYABX8jBebYACwPBvdtDwp5HddL771zKgl [TRUNCATED]
Nov 3, 2024 09:36:43.520909071 CET	1236	IN	Data Raw: 6a 30 7a 73 6a 63 53 43 33 72 39 64 68 6b 4f 68 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 Data Ascii: j0zsjcSC3r9dhkOhAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK59wFZRS7nQFA2ICBbWCYQ2670IctLD4B62t9uj2AZD7zeKKfqQn45oj3mIpVDMjCgl/OWCjxafvcFFOEgImr9ZkCU8s5kZpoUI+2X7gjtO9yTpNl6hut8apGJ3KrE7HkvXvwdn
Nov 3, 2024 09:36:43.520921946 CET	976	IN	Data Raw: 43 35 30 32 31 45 36 35 31 30 37 34 32 35 37 43 32 39 30 38 20 24 30 36 41 30 34 38 32 44 33 44 45 44 35 37 43 45 38 45 30 31 33 31 35 33 31 42 33 44 42 34 34 41 38 41 45 46 36 38 33 43 20 24 30 37 37 43 34 41 38 39 41 30 36 46 39 35 36 30 43 45 Data Ascii: C5021E651074257C2908 $06A0482D3DED57CE8E0131531B3DB44A8AEF683C $077C4A89A06F9560CED75BEF751BA2334378C3A3 $07C76EC5CC5CFDA80DE3082BC2F007105E2FC2EE $099B9AE1A6598017462F5C0EBD78B15FCAC27D56 $09E5621C0D7400FC18EF137A679F7FEB78F8650C $0A42ECB653F
Nov 3, 2024 09:36:43.520932913 CET	1236	IN	Data Raw: 43 41 46 33 43 30 45 33 31 30 20 24 31 42 41 41 33 33 46 45 34 41 46 41 33 41 33 30 37 37 39 37 30 34 33 46 43 44 35 39 36 36 35 44 33 43 32 43 45 35 35 32 20 24 31 43 31 35 34 38 46 42 38 33 46 35 37 43 36 42 38 44 32 41 39 35 32 38 32 45 33 41 Data Ascii: CAF3C0E310 $1BAA33FE4AFA3A307797043FCD59665D3C2CE552 $1C1548FB83F57C6B8D2A95282E3AC097BB05CEB2 $1CCA6F06C594F5A7E8CA0977101B71944F7904A5 $1CDA765239A945979917154730B66179092B305F $1CE1BE5A0847B901306CD1A302E0B2265C887F76 $1D9BE25D70B2838E321F0
Nov 3, 2024 09:36:43.520944118 CET	212	IN	Data Raw: 43 36 43 34 32 31 35 30 46 32 37 43 38 35 41 42 33 38 43 42 44 31 32 43 37 34 43 46 34 37 43 39 36 32 20 24 32 46 36 43 44 42 34 30 34 35 42 41 41 35 30 36 34 35 30 39 33 44 33 43 44 32 39 43 33 30 35 35 44 34 39 46 37 37 41 32 20 24 33 31 42 41 Data Ascii: C6C42150F27C85AB38CBD12C74CF47C962 $2F6CDB4045BAA50645093D3CD29C3055D49F77A2 $31BA70D5332FE49C500FBFFDB0CC5B9D3803CFBF $34B8957033F66FEBD3E0613E7A86C724B5F662A0 $3510FC0B2782BF7A37F1110FF6F31E1CAADB0375 $36565352
Nov 3, 2024 09:36:43.530499935 CET	1236	IN	Data Raw: 36 46 31 31 31 37 32 33 31 30 46 30 38 34 42 43 46 30 44 33 34 31 45 33 41 30 33 33 31 34 44 34 20 24 33 36 38 46 45 30 33 30 37 36 45 45 38 37 46 34 34 32 30 45 33 42 36 39 32 39 46 31 30 41 31 45 30 41 32 45 35 36 41 45 20 24 33 38 33 44 42 32 Data Ascii: 6F11172310F084BCF0D341E3A03314D4 $368FE03076EE87F4420E3B6929F10A1E0A2E56AE $383DB26B4684EC88C95B413827A2BE89720B096D $38414349727B47C7CFDCD4D1051AC86592A24DA8 $3960E28DFC659F2A15A3F4E987A8D064A3C64CA4 $39CACE2705E7C7343FC0EA246CA84B523379E04B
Nov 3, 2024 09:36:43.530514002 CET	212	IN	Data Raw: 32 33 36 30 35 41 33 41 36 39 37 43 31 38 20 24 34 42 43 46 34 38 45 44 36 46 33 45 32 38 33 39 30 31 42 37 37 32 37 44 42 42 30 34 37 30 45 37 46 43 39 33 34 35 30 36 20 24 34 42 45 31 46 45 46 46 36 45 39 30 37 39 46 37 30 37 38 34 42 39 45 42 Data Ascii: 23605A3A697C18 $4BCF48ED6F3E283901B7727DBB0470E7FC934506 $4BE1FEFF6E9079F70784B9EB5A6D1A66C80AB725 $4C6347BA25811DF45F7488D47EA30C4E7BFFEF65 $4DEF92140A80A1674307D68CC9D0561F8D803145 $4E93A68717B358B594F7ABAA5742
Nov 3, 2024 09:36:43.669734955 CET	1236	IN	Data Raw: 44 35 45 46 45 30 45 33 45 30 43 36 20 24 34 45 43 45 39 44 33 36 43 39 39 36 46 35 45 46 31 33 36 30 34 44 45 34 33 37 46 34 46 37 42 35 35 38 46 45 42 46 32 32 20 24 34 45 45 44 45 42 44 44 32 31 34 42 46 36 45 37 36 31 38 45 44 34 35 39 36 37 Data Ascii: D5EFE0E3E0C6 $4ECE9D36C996F5EF13604DE437F4F7B558FEBF22 $4EEDEBDD214BF6E7618ED459673DD2A27375AB19 $4EF90C045937B75E9C659E0B4BD289226ACE0941 $4FA16B83D8E024B47534EA8C9ABD9948B990F589 $5075EA14E582A3470562C0A2E463F8CF1D0D92FF $50CA9CAF5BA3AEF613F
Nov 3, 2024 09:36:43.669750929 CET	1236	IN	Data Raw: 43 34 32 30 36 38 37 35 34 42 41 38 43 39 41 41 30 41 36 38 46 45 34 31 37 34 33 34 39 34 37 34 35 35 30 43 20 24 36 34 34 45 44 32 41 38 30 30 34 31 36 36 37 43 37 44 34 30 38 37 33 36 45 34 44 31 46 35 43 31 32 35 38 32 46 44 46 45 20 24 36 36 Data Ascii: C42068754BA8C9AA0A68FE4174349474550C $644ED2A80041667C7D408736E4D1F5C12582FDFE $6604A61DCF83E588E1E611E59F5EEB930DCDB1BE $662A6D86992F9415762DF30BF8D7C425DB2E439F $66F85A637FB29FA909F077C7F10A6854023F8848 $682617B43C3D66701AEA75DF40124E441755B
Nov 3, 2024 09:36:43.669765949 CET	1236	IN	Data Raw: 43 38 41 32 41 33 43 44 37 42 45 41 38 36 37 35 30 42 20 24 38 39 32 39 41 46 35 35 35 34 42 45 36 32 32 44 45 33 46 45 33 34 38 31 32 43 30 33 44 36 35 46 45 37 44 35 44 30 46 31 20 24 38 39 33 41 33 44 34 42 39 31 45 41 30 41 43 42 33 38 44 37 Data Ascii: C8A2A3CD7BEA86750B $8929AF5554BE622DE3FE34812C03D65FE7D5D0F1 $893A3D4B91EA0ACB38D7E4A28ED3CF396E159EF1 $8BF3E6871098D4E753CCA83B2A160431A0795987 $8C20514CF1AA6FB8708703B0EC38FC5C8713F502 $8C6C94416AF82A718133FEF9A507E6A730B428CB $8D7721D184019
Nov 3, 2024 09:36:43.669847012 CET	1236	IN	Data Raw: 20 24 41 30 30 41 43 30 35 42 41 38 34 45 32 34 38 30 43 41 42 35 37 36 35 45 41 37 41 42 46 43 42 31 37 43 45 44 30 41 45 34 20 24 41 30 43 43 45 42 34 39 36 46 39 30 34 34 30 32 45 35 39 45 46 38 31 34 37 32 38 46 39 34 32 37 39 32 39 37 32 36 Data Ascii: $A00AC05BA84E2480CAB5765EA7ABFCB17CED0AE4 $A0CCEB496F904402E59EF814728F942792972696 $A2A814032CB9CAF89583D9A1600C682458B0479C $A347D0563FC397D434898395FEE6E8395E2F18A0 $A4CD08F241A7AF0E5D37DE1A067DBAD5EED8BD97 $A4E98C9CE163B64A73B0ACA0070A9E0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	58555	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:43.997437000 CET	175	OUT	GET /tor/server/fp/baeb4be8c34e480441961e00b54f2280c2c8d19f HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	58556	45.66.35.11	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:45.068762064 CET	172	OUT	GET /tor/server/fp/baeb4be8c34e480441961e00b54f2280c2c8d19f HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	58557	45.66.35.11	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:46.144495010 CET	172	OUT	GET /tor/server/fp/baeb4be8c34e480441961e00b54f2280c2c8d19f HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	58559	45.66.35.11	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:48.889532089 CET	172	OUT	GET /tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	58560	45.66.35.11	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:50.153862953 CET	172	OUT	GET /tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	58561	216.218.219.41	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:51.205715895 CET	175	OUT	GET /tor/server/fp/ac7c0f9d57dadad5d8f4568ee1543ef3e22a47ce HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:36:51.964517117 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:36:51 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:36:51 GMT Data Raw: 72 6f 75 74 65 72 20 64 6f 74 73 72 63 52 65 6c 61 79 32 20 31 33 30 2e 32 32 35 2e 32 34 34 2e 39 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 61 50 41 54 6a 5a 51 52 6a 72 33 72 54 48 48 71 63 78 46 33 31 55 48 77 4c 50 53 71 67 41 32 4b 54 2f 6a 6a 7a 43 63 7a 52 6b 47 48 46 72 41 51 41 67 42 41 41 4b 66 2f 56 32 0a 63 37 53 4c 53 7a 6c 6b 70 2f 5a 30 75 43 41 54 47 4d 31 77 53 76 51 63 6f 6f 75 69 30 59 30 58 32 71 64 47 33 4a 2b 35 4b 68 53 72 59 52 57 4e 64 66 4c 55 71 31 79 4b 5a 37 67 34 50 48 55 4c 0a 4f 51 6e 68 2f 47 68 69 32 68 2b 66 78 6d 30 55 57 34 41 58 69 53 74 36 65 76 62 68 5a 56 78 52 57 63 76 73 36 72 71 6a 44 4d 62 38 55 56 2f 71 48 51 36 65 69 58 2f 33 33 67 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 43 6e 2f 31 64 6e 4f 30 69 30 73 [TRUNCATED] Data Ascii: router dotsrcRelay2 130.225.244.90 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1aPATjZQRjr3rTHHqcxF31UHwLPSqgA2KT/jjzCczRkGHFrAQAgBAAKf/V2c7SLSzlkp/Z0uCATGM1wSvQcooui0Y0X2qdG3J+5KhSrYRWNdfLUq1yKZ7g4PHULOQnh/Ghi2h+fxm0UW4AXiSt6evbhZVxRWcvs6rqjDMb8UV/qHQ6eiX/33gE=-----END ED25519 CERT-----master-key-ed25519 Cn/1dnO0i0s5ZKf2dLggExjNcEr0HKKLotGNF9qnRtwor-address [2001:878:346:1cf9:446a:c4eb:4548:7062]:9001platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 00:51:27fingerprint AC7C 0F9D 57DA DAD5 D8F4 568E E154 3EF3 E22A 47CEuptime 64804bandwidth 1073741824 1073741824 65042605extra-info-digest D10FEF604FE476480ED6AC4406D86AA33F95B3C1 0XKDhzAAzOS2/w7cp7eFm4YCmUzThUl9MTXahul1YsEonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALe0/qtVgcp4kyYEjqn/0BTQel64oSRyTdBW10Wz61n97QdqCVEH17TFQSRlhXQxVtvXDek/Zi/Du2ma48TCLCSZeUQvR7dB9i7JpgZoPVU2FQ [TRUNCATED]
Nov 3, 2024 09:36:51.964531898 CET	1236	IN	Data Raw: 41 64 7a 7a 31 6c 30 38 34 51 2f 32 57 42 4f 78 2b 4e 7a 62 35 6e 6c 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 Data Ascii: Adzz1l084Q/2WBOx+Nzb5nlAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKhEluDXasTLcT8KVVLVyp+wcieEifNoDSYXDaWHAtdlf8+bB7Tea8X6EXOqPJ1NqUwOnatwzOvun7Tt9mA/LEhiVTJrh6p/00bezRrMwr20pmUEXwIRm8KfDh5MKpZUi
Nov 3, 2024 09:36:51.964543104 CET	612	IN	Data Raw: 42 36 35 35 41 36 44 38 36 39 38 44 39 37 43 31 34 35 39 41 32 44 46 38 45 37 37 20 24 43 30 43 33 30 30 42 43 32 45 38 34 41 35 30 33 44 34 46 35 31 41 36 41 44 36 33 42 33 46 36 42 46 33 45 31 31 32 43 32 0a 68 69 64 64 65 6e 2d 73 65 72 76 69 Data Ascii: B655A6D8698D97C1459A2DF8E77 $C0C300BC2E84A503D4F51A6AD63B3F6BF3E112C2hidden-service-dircontact email:staff[]dotsrc.org url:https://dotsrc.org proof:uri-rsa ciissversion:2ntor-onion-key wP2xmrHW6yH2yeXv3md0nt5pejhrj3f6hB9aZYr8YRAreject :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	58563	193.23.244.244	80	1252	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:36:52.307780981 CET	175	OUT	GET /tor/server/fp/e730a4d8bb725a2a27560008024c4dbfaa322835 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:36:53.365559101 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:36:53 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:36:53 GMT Data Raw: 72 6f 75 74 65 72 20 4e 54 48 32 33 52 35 20 31 39 32 2e 34 32 2e 31 31 36 2e 31 37 35 20 39 30 30 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 59 39 41 52 50 35 37 72 6b 61 4f 42 2f 76 46 37 58 66 39 47 50 47 64 63 4a 76 6e 55 76 76 49 6e 42 36 4b 62 4a 41 4c 70 6b 68 6e 4c 6b 50 41 51 41 67 42 41 41 73 38 5a 4c 59 0a 66 6a 62 32 54 52 56 36 6a 65 55 4a 4d 7a 79 6a 6d 6d 56 2f 4f 6c 6f 46 56 30 78 48 48 4a 38 47 33 46 70 4e 65 53 4d 45 34 74 43 70 53 49 71 46 38 6a 64 77 72 44 50 54 53 78 46 71 4a 34 68 4e 0a 43 34 55 69 4b 51 5a 38 64 4c 59 2f 53 36 76 43 31 4d 32 72 4b 4c 6d 72 66 56 44 72 6c 47 4f 51 2f 4c 48 6e 63 2f 47 4d 63 4c 5a 4d 33 41 2b 66 6f 64 5a 68 66 41 48 6a 64 41 59 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 4c 50 47 53 32 48 34 32 39 6b 30 56 65 6f 33 6c [TRUNCATED] Data Ascii: router NTH23R5 192.42.116.175 9004 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1Y9ARP57rkaOB/vF7Xf9GPGdcJvnUvvInB6KbJALpkhnLkPAQAgBAAs8ZLYfjb2TRV6jeUJMzyjmmV/OloFV0xHHJ8G3FpNeSME4tCpSIqF8jdwrDPTSxFqJ4hNC4UiKQZ8dLY/S6vC1M2rKLmrfVDrlGOQ/LHnc/GMcLZM3A+fodZhfAHjdAY=-----END ED25519 CERT-----master-key-ed25519 LPGS2H429k0Veo3lCTM8o5plfzpaBVdMRxyfBtxaTXkor-address [2001:67c:6ec:203:192:42:116:175]:9004platform Tor 0.4.8.12 on FreeBSDproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 08:29:08fingerprint E730 A4D8 BB72 5A2A 2756 0008 024C 4DBF AA32 2835uptime 1792943bandwidth 1073741824 1073741824 19912935extra-info-digest ACF1D8DDF986FBE5222684E0F8376B8DC79DCBF9 +Qvc5RM+fcsV+nRcLABYU/KFzG9v92obwaP9aG70p4Eonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMfkuCv6207KWI9m5XeKUeyPGnmvtV1eDisdGxrUq1WNKA6sxr08q0AiDilRl7y/htePeMjtB57rj2PhSpOiPF+y84eBiHvu6C7P1+UA3QibNaiSjdqT1 [TRUNCATED]
Nov 3, 2024 09:36:53.365587950 CET	1236	IN	Data Raw: 68 2b 52 49 47 68 52 79 30 63 71 6d 4c 36 47 7a 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 Data Ascii: h+RIGhRy0cqmL6GzAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKOUSKIWa+oh/5ZtsmBJm5cdnwnOIrb08xX97K1lc68qpfbMduDrCfTZraSl2zDwWnfmWDnZPoNfzY24/+uCA5ssiXdlLk7nVczOKKVoOk6ecSMgjT60naZhR/P5rPawKgUQiZQo
Nov 3, 2024 09:36:53.365600109 CET	1236	IN	Data Raw: 43 35 30 32 31 45 36 35 31 30 37 34 32 35 37 43 32 39 30 38 20 24 30 36 41 30 34 38 32 44 33 44 45 44 35 37 43 45 38 45 30 31 33 31 35 33 31 42 33 44 42 34 34 41 38 41 45 46 36 38 33 43 20 24 30 37 37 43 34 41 38 39 41 30 36 46 39 35 36 30 43 45 Data Ascii: C5021E651074257C2908 $06A0482D3DED57CE8E0131531B3DB44A8AEF683C $077C4A89A06F9560CED75BEF751BA2334378C3A3 $07C76EC5CC5CFDA80DE3082BC2F007105E2FC2EE $099B9AE1A6598017462F5C0EBD78B15FCAC27D56 $09E5621C0D7400FC18EF137A679F7FEB78F8650C $0A42ECB653F
Nov 3, 2024 09:36:53.365611076 CET	1236	IN	Data Raw: 32 33 20 24 31 44 42 46 30 30 38 43 39 43 44 36 44 31 45 44 45 42 43 30 46 38 39 35 44 44 44 36 44 39 36 37 33 33 33 38 34 33 46 39 20 24 31 45 32 30 42 32 39 45 34 32 41 32 35 34 31 39 33 44 45 37 44 33 39 32 43 36 30 37 35 41 33 46 41 35 35 34 Data Ascii: 23 $1DBF008C9CD6D1EDEBC0F895DDD6D967333843F9 $1E20B29E42A254193DE7D392C6075A3FA554E747 $1E4B09B0A4FDB0B2149785E2AFAA4AE7271B2E20 $1E76793C9144EBB313F2B091BDF7D14AAC70C02F $203351B143F7FD85A9797755586B08122186174E $213906DD6FBC4DA748260366E2CF2
Nov 3, 2024 09:36:53.365622044 CET	1236	IN	Data Raw: 46 34 34 32 30 45 33 42 36 39 32 39 46 31 30 41 31 45 30 41 32 45 35 36 41 45 20 24 33 38 33 44 42 32 36 42 34 36 38 34 45 43 38 38 43 39 35 42 34 31 33 38 32 37 41 32 42 45 38 39 37 32 30 42 30 39 36 44 20 24 33 38 34 31 34 33 34 39 37 32 37 42 Data Ascii: F4420E3B6929F10A1E0A2E56AE $383DB26B4684EC88C95B413827A2BE89720B096D $38414349727B47C7CFDCD4D1051AC86592A24DA8 $3960E28DFC659F2A15A3F4E987A8D064A3C64CA4 $39CACE2705E7C7343FC0EA246CA84B523379E04B $3A7D4C0E24D4B485297930F40CEA12CEA2817146 $3AC3A
Nov 3, 2024 09:36:53.365633965 CET	1236	IN	Data Raw: 46 43 39 33 34 35 30 36 20 24 34 42 45 31 46 45 46 46 36 45 39 30 37 39 46 37 30 37 38 34 42 39 45 42 35 41 36 44 31 41 36 36 43 38 30 41 42 37 32 35 20 24 34 43 36 33 34 37 42 41 32 35 38 31 31 44 46 34 35 46 37 34 38 38 44 34 37 45 41 33 30 43 Data Ascii: FC934506 $4BE1FEFF6E9079F70784B9EB5A6D1A66C80AB725 $4C6347BA25811DF45F7488D47EA30C4E7BFFEF65 $4DEF92140A80A1674307D68CC9D0561F8D803145 $4E93A68717B358B594F7ABAA5742D5EFE0E3E0C6 $4ECE9D36C996F5EF13604DE437F4F7B558FEBF22 $4EEDEBDD214BF6E7618ED45
Nov 3, 2024 09:36:53.365643978 CET	1236	IN	Data Raw: 30 46 36 37 39 30 30 38 44 31 43 31 43 32 44 33 35 41 38 30 30 36 35 31 42 30 33 35 32 32 41 39 20 24 36 31 45 36 45 31 34 39 45 39 32 46 30 45 33 34 39 42 32 46 44 35 38 46 46 33 32 43 41 34 35 45 39 38 43 41 45 31 36 31 20 24 36 32 32 39 43 37 Data Ascii: 0F679008D1C1C2D35A800651B03522A9 $61E6E149E92F0E349B2FD58FF32CA45E98CAE161 $6229C704A312233CD333D5196F821C7FFD5B2F6F $62823CA61A9C528297E205DE85E33A0CA7C10687 $6432C42068754BA8C9AA0A68FE4174349474550C $644ED2A80041667C7D408736E4D1F5C12582FDFE
Nov 3, 2024 09:36:53.365655899 CET	36	IN	Data Raw: 32 41 32 44 38 37 30 35 42 46 37 45 37 37 20 24 38 36 33 39 36 39 35 41 45 41 39 39 43 35 46 33 42 34 43 41 Data Ascii: 2A2D8705BF7E77 $8639695AEA99C5F3B4CA
Nov 3, 2024 09:36:53.365664959 CET	1236	IN	Data Raw: 31 36 34 44 36 42 31 32 42 43 43 33 38 33 30 46 44 46 36 43 20 24 38 36 34 42 30 39 35 39 31 37 45 41 33 34 38 36 37 33 38 41 31 33 38 33 30 33 46 46 43 33 32 32 45 33 39 35 44 33 41 41 20 24 38 36 46 44 33 45 39 33 30 34 45 44 45 30 42 42 45 30 Data Ascii: 164D6B12BCC3830FDF6C $864B095917EA3486738A138303FFC322E395D3AA $86FD3E9304EDE0BBE0EEF6515FB83F62D45168DB $890A37A31D610687482666C8A2A3CD7BEA86750B $8929AF5554BE622DE3FE34812C03D65FE7D5D0F1 $893A3D4B91EA0ACB38D7E4A28ED3CF396E159EF1 $8BF3E687109
Nov 3, 2024 09:36:53.365683079 CET	1236	IN	Data Raw: 35 34 20 24 39 44 44 34 33 39 39 32 36 41 35 44 35 46 32 30 30 44 46 30 46 37 35 30 38 44 36 38 33 33 42 32 34 39 46 33 35 43 37 31 20 24 39 45 43 46 38 46 30 36 35 43 37 39 46 43 32 31 33 41 31 42 46 36 43 31 41 41 32 44 38 43 42 43 43 39 33 36 Data Ascii: 54 $9DD439926A5D5F200DF0F7508D6833B249F35C71 $9ECF8F065C79FC213A1BF6C1AA2D8CBCC9368F92 $9F818E4199BFCB4D8FA3257EB31B47B2670CFB4B $A00AC05BA84E2480CAB5765EA7ABFCB17CED0AE4 $A0CCEB496F904402E59EF814728F942792972696 $A2A814032CB9CAF89583D9A1600C6
Nov 3, 2024 09:36:53.370560884 CET	1236	IN	Data Raw: 33 31 41 44 38 45 37 33 33 36 38 39 37 38 39 43 33 34 39 34 39 39 38 41 37 46 20 24 42 44 35 30 44 32 36 43 34 46 36 44 34 41 33 33 37 36 39 43 31 45 31 38 41 44 30 43 46 42 31 33 30 36 34 31 35 32 32 37 20 24 42 44 43 42 41 31 36 32 44 42 42 32 Data Ascii: 31AD8E733689789C3494998A7F $BD50D26C4F6D4A33769C1E18AD0CFB1306415227 $BDCBA162DBB2D750E6DD78470062EEBAC43A3198 $BE7BC780C43A64686D4A25725EAE436F2CE6D13A $BFF46E10B7D4BBAB386A0515521E5AABA829EE36 $C0FCEFBD0F2E5CF686015742DE4F695D17255759 $C1E8B

Target ID:	0
Start time:	03:34:58
Start date:	03/11/2024
Path:	C:\Users\user\Desktop\Payload 94.75 (2).225.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Imagebase:	0x7ff639b70000
File size:	133'642 bytes
MD5 hash:	9C972CB270FB33444A0F8D12D6176C7D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	03:34:58
Start date:	03/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	03:35:12
Start date:	03/11/2024
Path:	C:\Users\user\Desktop\Payload 94.75 (2).225.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Imagebase:	0x7ff639b70000
File size:	133'642 bytes
MD5 hash:	9C972CB270FB33444A0F8D12D6176C7D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	03:35:12
Start date:	03/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	03:35:20
Start date:	03/11/2024
Path:	C:\Users\user\Desktop\Payload 94.75 (2).225.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Imagebase:	0x7ff639b70000
File size:	133'642 bytes
MD5 hash:	9C972CB270FB33444A0F8D12D6176C7D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	03:35:20
Start date:	03/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	45.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	33.3%
Total number of Nodes:	18
Total number of Limit Nodes:	3

Executed Functions

Function 00007FF639B727B0 Relevance: 45.6, APIs: 13, Strings: 13, Instructions: 80
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetEnvironmentVariableA.KERNEL32(?,?,?,?,?,?,00007FF639B710B1), ref: 00007FF639B727DE
LoadLibraryA.KERNEL32(?,?,?,?,?,?,00007FF639B710B1), ref: 00007FF639B727EF
BCryptOpenAlgorithmProvider.BCRYPT(?,?,?,?,?,?,00007FF639B710B1), ref: 00007FF639B72809
BCryptSetProperty.BCRYPT ref: 00007FF639B7282F
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF639B72849
BCryptSetProperty.BCRYPT ref: 00007FF639B7286F
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF639B728AA
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF639B728C4
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF639B728DE
BCryptSetProperty.BCRYPT ref: 00007FF639B72904
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF639B7291E
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF639B72938
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF639B72955

Strings

AES, xrefs: 00007FF639B727F8, 00007FF639B72838
RSA, xrefs: 00007FF639B7287C
ECDH, xrefs: 00007FF639B728CD
ChainingMode, xrefs: 00007FF639B72822, 00007FF639B72862
RNG, xrefs: 00007FF639B7290D
ChainingModeCBC, xrefs: 00007FF639B72816
SHA256, xrefs: 00007FF639B72944
curve25519, xrefs: 00007FF639B728EB
ECCCurveName, xrefs: 00007FF639B728F7
bcrypt_alt.dll, xrefs: 00007FF639B727E8
SHA1, xrefs: 00007FF639B72927
ChainingModeECB, xrefs: 00007FF639B72856
bcrypt_alt_prov, xrefs: 00007FF639B727B7

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: Crypt$AlgorithmOpenProvider$Property$EnvironmentLibraryLoadVariable
String ID: AES$ChainingMode$ChainingModeCBC$ChainingModeECB$ECCCurveName$ECDH$RNG$RSA$SHA1$SHA256$bcrypt_alt.dll$bcrypt_alt_prov$curve25519
API String ID: 2393475537-1894849930
Opcode ID: af65b64e95c7d1159a78f80cdab7d13898f4c9114607b7542d1cf1c4319dcf9a
Instruction ID: 7a4f38e6aea3549e27be33c76b71b15712f13ab85e7deec241f315a07c1687df
Opcode Fuzzy Hash: af65b64e95c7d1159a78f80cdab7d13898f4c9114607b7542d1cf1c4319dcf9a
Instruction Fuzzy Hash: 10413D65A2CA9FD1F714AF14E854A732362EF6E748F805131C80ECA6349F6CE148EB42

Function 00007FF639B78748 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 133
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF639B764B4: free.MSVCRT ref: 00007FF639B76518

CryptHashData.ADVAPI32 ref: 00007FF639B78849

Part of subcall function 00007FF639B79410: CryptGetHashParam.ADVAPI32 ref: 00007FF639B79465

free.MSVCRT ref: 00007FF639B7886D
CryptDestroyHash.ADVAPI32 ref: 00007FF639B7887D
free.MSVCRT ref: 00007FF639B7888B
free.MSVCRT ref: 00007FF639B78896
CryptHashData.ADVAPI32 ref: 00007FF639B788FF
free.MSVCRT ref: 00007FF639B7890A
CryptDestroyHash.ADVAPI32 ref: 00007FF639B7891A
free.MSVCRT ref: 00007FF639B78928
free.MSVCRT ref: 00007FF639B78933

Part of subcall function 00007FF639B79F1C: CryptDuplicateHash.ADVAPI32 ref: 00007FF639B79F46

Strings

circuit::handle_cell() cannot decrypt relay cell, destroying circuit, xrefs: 00007FF639B788A9

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$CryptHash$DataDestroy$DuplicateParam
String ID: circuit::handle_cell() cannot decrypt relay cell, destroying circuit
API String ID: 129615695-1619389320
Opcode ID: 2c1156c71683ba85882897d6bf7297c35d08242e109c4a5d08a89e7d305649d4
Instruction ID: 1a7373720bffd5d8a95602ae8e10a5df844d2466accccf61fa4840973b109f27
Opcode Fuzzy Hash: 2c1156c71683ba85882897d6bf7297c35d08242e109c4a5d08a89e7d305649d4
Instruction Fuzzy Hash: 5A515D32B08B4AC9EB00DFA5D8905AE3376FB4AB98B005536DE0E63B58DF34D506D741

Function 00007FF639B7F42C Relevance: 18.1, APIs: 12, Instructions: 121
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 00007FF639B7F483
memmove.MSVCRT ref: 00007FF639B7F4B2
CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F4D9
free.MSVCRT ref: 00007FF639B7F4E2
CryptCreateHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F504
memset.MSVCRT ref: 00007FF639B7F51F
CryptSetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F532
CryptHashData.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F560
CryptGetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F58B
CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F5AA
CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F5BD
CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F5D0

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: Crypt$Hash$Destroy$Param$CreateDataImportfreemallocmemmovememset
String ID:
API String ID: 1459146999-0
Opcode ID: 3a8452010887efd038ead8f63df07d28fc88ee800229d31c207340e384f9dd2c
Instruction ID: 5a24c5e52bf0cd6b023cae039c9fc62a1bf143d65d6f3c72c3eef512084a6545
Opcode Fuzzy Hash: 3a8452010887efd038ead8f63df07d28fc88ee800229d31c207340e384f9dd2c
Instruction Fuzzy Hash: 4751CF32B14A95C9E714DFA1E8446AE7771FB89B98F108226CE5EA3B58DF38D045CB00

Function 00007FF639B7B17C Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 170
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

free.MSVCRT ref: 00007FF639B7B1F3
free.MSVCRT ref: 00007FF639B7B1FE
free.MSVCRT ref: 00007FF639B7B209

Part of subcall function 00007FF639B7B504: free.MSVCRT ref: 00007FF639B7B5C4
Part of subcall function 00007FF639B7B504: free.MSVCRT ref: 00007FF639B7B5CF

memcmp.MSVCRT ref: 00007FF639B7B25C

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

free.MSVCRT ref: 00007FF639B7B2C4
free.MSVCRT ref: 00007FF639B7B2DB
CryptGenRandom.ADVAPI32 ref: 00007FF639B7B30E

Strings

circuit::rendezvous_establish() [circuit: %X, state: established], xrefs: 00007FF639B7B380
circuit::rendezvous_establish() [circuit: %X, state: not established], xrefs: 00007FF639B7B3B8
circuit::rendezvous_establish() [circuit: %X, state: establishing], xrefs: 00007FF639B7B323

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$CryptCurrentLocalRandomThreadTime_cwprintf_s_lmemcmp
String ID: circuit::rendezvous_establish() [circuit: %X, state: established]$circuit::rendezvous_establish() [circuit: %X, state: establishing]$circuit::rendezvous_establish() [circuit: %X, state: not established]
API String ID: 2405295690-2993231946
Opcode ID: 2d384c85679c4de6109483baca3f3443502bebb8e25836816824d053c18a63d8
Instruction ID: 364e0ec9098cf9fdf4074b3df2ae889a58661cbc26fc65478fa2fcc05625830c
Opcode Fuzzy Hash: 2d384c85679c4de6109483baca3f3443502bebb8e25836816824d053c18a63d8
Instruction Fuzzy Hash: C471B422B04B8AC5EB00DFB6D8001AE2362FF4AB98F544336CE5E97795CE38D145DB41

Function 00007FF639B7A9C0 Relevance: 17.7, APIs: 8, Strings: 2, Instructions: 157
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptGenRandom.ADVAPI32 ref: 00007FF639B7AA87
free.MSVCRT ref: 00007FF639B7AAB1
free.MSVCRT ref: 00007FF639B7AABC
free.MSVCRT ref: 00007FF639B7AAC7
free.MSVCRT ref: 00007FF639B7AAD2
CryptGenRandom.ADVAPI32 ref: 00007FF639B7AAF7
inet_ntoa.WS2_32 ref: 00007FF639B7AB31
inet_ntoa.WS2_32 ref: 00007FF639B7AB92

Strings

consensus::download_from_random_authority() [path: http://%s:%u%s], xrefs: 00007FF639B7AB61
gfffffff, xrefs: 00007FF639B7AA0A

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$CryptRandominet_ntoa
String ID: consensus::download_from_random_authority() [path: http://%s:%u%s]$gfffffff
API String ID: 3056602706-1112183986
Opcode ID: e313b656025647504bfc937c6d4ec928ddca1ebb5a3043183d90684be41d5dc9
Instruction ID: b60be21504ee4a814f25345a29959e171e2be76a15a76c155b168c9c828df627
Opcode Fuzzy Hash: e313b656025647504bfc937c6d4ec928ddca1ebb5a3043183d90684be41d5dc9
Instruction Fuzzy Hash: BD618062B18A8986EB00DF76D8400EE7371FB89BA4B145336EE5E937A8DF38D505C740

Function 00007FF639B71024 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 24encryptionlibraryCOMMON

Download Yara Rule

APIs

GetEnvironmentVariableA.KERNEL32 ref: 00007FF639B71034
LoadLibraryA.KERNEL32 ref: 00007FF639B71045
CryptAcquireContextA.ADVAPI32 ref: 00007FF639B71069
CryptAcquireContextA.ADVAPI32 ref: 00007FF639B7108D

Strings

Microsoft Enhanced RSA and AES Cryptographic Provider, xrefs: 00007FF639B71059
csp_alt_prov, xrefs: 00007FF639B7102B
Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, xrefs: 00007FF639B7107D
csp_alt.dll, xrefs: 00007FF639B7103E

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: AcquireContextCrypt$EnvironmentLibraryLoadVariable
String ID: Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider$Microsoft Enhanced RSA and AES Cryptographic Provider$csp_alt.dll$csp_alt_prov
API String ID: 2970050021-3829227113
Opcode ID: ec1cb5cf09f0c3a8500fff5b0d67dc0c0f7cf35773c4f3e9199e699a448cf9ac
Instruction ID: c13dd9eca2769cce23ef6c1fc994c988d81f0de47aee2db8b168ed8754468338
Opcode Fuzzy Hash: ec1cb5cf09f0c3a8500fff5b0d67dc0c0f7cf35773c4f3e9199e699a448cf9ac
Instruction Fuzzy Hash: 7EF09665A1C58FD1E718EF11EC446A62262BB5A704F844132C44ED6264DF2CA209EF16

Function 00007FF639B8111C Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 100encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B7AF44: malloc.MSVCRT ref: 00007FF639B7AF82
Part of subcall function 00007FF639B7AF44: memmove.MSVCRT(?,?,?,00007FF639B7ACBA), ref: 00007FF639B7AF9D
Part of subcall function 00007FF639B7AF44: free.MSVCRT ref: 00007FF639B7AFA6

free.MSVCRT ref: 00007FF639B811CC
free.MSVCRT ref: 00007FF639B811D7
free.MSVCRT ref: 00007FF639B811E2
CryptGenRandom.ADVAPI32 ref: 00007FF639B8120E
free.MSVCRT ref: 00007FF639B81265
free.MSVCRT ref: 00007FF639B81270

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

Strings

No available routers, xrefs: 00007FF639B81248

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$CryptCurrentLocalRandomThreadTime_cwprintf_s_lmallocmemmove
String ID: No available routers
API String ID: 980609513-1591776554
Opcode ID: 8516fc97420bd58447a1cd82f331950f5966983d448641c51367fc6bb0c93a52
Instruction ID: 20d105109990f9caaf05759b7d34bc5e27ba3d13a16e5dec46ccd447f32798dc
Opcode Fuzzy Hash: 8516fc97420bd58447a1cd82f331950f5966983d448641c51367fc6bb0c93a52
Instruction Fuzzy Hash: 44416122B18A8AD5EB04DF65D8402EE3332FB89B94F444232DE0EA7799DF38E455D741

Function 00007FF639B799F4 Relevance: 6.2, APIs: 4, Instructions: 159encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B793B0: CryptCreateHash.ADVAPI32 ref: 00007FF639B793D4

CryptHashData.ADVAPI32 ref: 00007FF639B79B76
CryptHashData.ADVAPI32 ref: 00007FF639B79B9F

Part of subcall function 00007FF639B7A16C: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF639B79BDE), ref: 00007FF639B7A1FB
Part of subcall function 00007FF639B7A16C: CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF639B79BDE), ref: 00007FF639B7A228

Part of subcall function 00007FF639B79F60: memset.MSVCRT ref: 00007FF639B79F7A

CryptDestroyKey.ADVAPI32 ref: 00007FF639B79BF8
CryptDestroyKey.ADVAPI32 ref: 00007FF639B79C55

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: Crypt$Hash$DataDestroy$CreateImportmemmovememset
String ID:
API String ID: 2495588091-0
Opcode ID: 47df983cf1494ad4711af12cb93fe6b7ecff52cf6c72ed6ec33fab3285e732b3
Instruction ID: b8c8ac10614d2eab0c4380cd28868a591a13454f23a6d451c7af3035ea23cff5
Opcode Fuzzy Hash: 47df983cf1494ad4711af12cb93fe6b7ecff52cf6c72ed6ec33fab3285e732b3
Instruction Fuzzy Hash: 36716833A19B85CAE720CF64F84059EB3B9FB89758F105225EA8D53B18EF38D195CB04

Function 00007FF639B761C4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31networkCOMMON

Download Yara Rule

APIs

recv.WS2_32 ref: 00007FF639B761E1
WSAGetLastError.WS2_32 ref: 00007FF639B76201

Strings

tcp_socket::read_impl recv error: %i, xrefs: 00007FF639B7620A

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: ErrorLastrecv
String ID: tcp_socket::read_impl recv error: %i
API String ID: 2514157807-4185223013
Opcode ID: 0de81a523676fafa1a5b36a7287f1b3a87dd7633110d12db186c96da9e59cc4d
Instruction ID: 53aea4665bd79ce24107c6e3fc2e0faf0bbfea8b51047f01d0493ba6efed492b
Opcode Fuzzy Hash: 0de81a523676fafa1a5b36a7287f1b3a87dd7633110d12db186c96da9e59cc4d
Instruction Fuzzy Hash: CEF0D621A0CA8FC1DA509F65F54057A2362AF46BE8B005330C92F87BE4DF3CD4409702

Function 00007FF639B7A16C Relevance: 3.1, APIs: 2, Instructions: 52encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF639B79BDE), ref: 00007FF639B7A1FB
CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF639B79BDE), ref: 00007FF639B7A228

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptImportmemmove
String ID:
API String ID: 3388866568-0
Opcode ID: b0d9a24e77b2941c7b9f6f5f5800f2d24bd67ae383bc772e3f8ef66be7dcaf21
Instruction ID: 3ad4eaa42f584d13fc46b2dc5c3696d8a9bdaff8244016d0b843115b19a1cf54
Opcode Fuzzy Hash: b0d9a24e77b2941c7b9f6f5f5800f2d24bd67ae383bc772e3f8ef66be7dcaf21
Instruction Fuzzy Hash: 77219832619B85C6D320CF25F88415EB3B8F399B90B108221DBEE83B54DF79E596CB00

Function 00007FF639B7B5F0 Relevance: 33.6, APIs: 4, Strings: 15, Instructions: 385
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

inet_ntoa.WS2_32 ref: 00007FF639B7B660

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

Part of subcall function 00007FF639B71BAC: free.MSVCRT ref: 00007FF639B71BC2

free.MSVCRT ref: 00007FF639B7B88A
inet_ntoa.WS2_32 ref: 00007FF639B7B8EE
inet_ntoa.WS2_32 ref: 00007FF639B7B711

Part of subcall function 00007FF639B76E8C: free.MSVCRT ref: 00007FF639B76ED2

Strings

/tor/rendezvous2/%s, xrefs: 00007FF639B7B845
Hidden service descriptor is invalid..., xrefs: 00007FF639B7B9F0
gfffffff, xrefs: 00007FF639B7BB68
Creating circuit for hidden service (try #%u), connecting to '%s' (%s:%u), xrefs: 00007FF639B7B6A1
Hidden service descriptor is valid..., xrefs: 00007FF639B7BAAC
Hidden service descriptor received..., xrefs: 00007FF639B7B963
Extended..., xrefs: 00007FF639B7B7A3
404 Not found, xrefs: 00007FF639B7B998
Sending request for hidden service descriptor..., xrefs: 00007FF639B7B8A5
hidden_service::fetch_hidden_service_descriptor() [path: %s], xrefs: 00007FF639B7B894
Connected..., xrefs: 00007FF639B7B6C8
Error while extending the directory circuit, xrefs: 00007FF639B7B77C
Error while establishing the directory stream, xrefs: 00007FF639B7B7D3
Extending circuit for hidden service, connecting to responsible directory '%s' (%s:%u), xrefs: 00007FF639B7B741
Hidden service descriptor contains no introduction points..., xrefs: 00007FF639B7BB85

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: freeinet_ntoa$CurrentLocalThreadTime_cwprintf_s_l
String ID: Connected...$Creating circuit for hidden service (try #%u), connecting to '%s' (%s:%u)$Error while establishing the directory stream$Error while extending the directory circuit$Extended...$Extending circuit for hidden service, connecting to responsible directory '%s' (%s:%u)$Hidden service descriptor contains no introduction points...$Hidden service descriptor is invalid...$Hidden service descriptor is valid...$Hidden service descriptor received...$Sending request for hidden service descriptor...$/tor/rendezvous2/%s$404 Not found$gfffffff$hidden_service::fetch_hidden_service_descriptor() [path: %s]
API String ID: 1332336199-2986099802
Opcode ID: ac90d79e4faa7228a7989787331f40e6b425d15846be7a25f2aac41549bb3984
Instruction ID: f19d10f468ed31a72891c40cb0724868fd14a2a8ce0617d4064ae15ac3df85b6
Opcode Fuzzy Hash: ac90d79e4faa7228a7989787331f40e6b425d15846be7a25f2aac41549bb3984
Instruction Fuzzy Hash: B802B172A09B8A86EB10DF65D8402EE7362FF8AB94F504232DA4E83765DF3CD545DB01

Function 00007FF639B71160 Relevance: 26.4, APIs: 10, Strings: 5, Instructions: 154
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memcmp.MSVCRT ref: 00007FF639B711CD
memcmp.MSVCRT ref: 00007FF639B711FB
memcmp.MSVCRT ref: 00007FF639B7122D
memcmp.MSVCRT ref: 00007FF639B71260
memcmp.MSVCRT ref: 00007FF639B71292
GetConsoleWindow.KERNEL32 ref: 00007FF639B712A5
GetConsoleWindow.KERNELBASE ref: 00007FF639B712B2
ShowWindow.USER32 ref: 00007FF639B712BD
free.MSVCRT ref: 00007FF639B7132F
SleepEx.KERNELBASE ref: 00007FF639B71386

Strings

info, xrefs: 00007FF639B71223
debug, xrefs: 00007FF639B711F1
cached-consensus, xrefs: 00007FF639B712C8
warning, xrefs: 00007FF639B71256
error, xrefs: 00007FF639B71288

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memcmp$Window$Console$ShowSleepfree
String ID: cached-consensus$debug$error$info$warning
API String ID: 4256011749-3964234580
Opcode ID: 6aebf3955f5852d03141b54ac61140722e436ed26eee0c70a191a1ba19a04952
Instruction ID: 2c7bf2efec961311a7c6389eb57779dd7b7213978e80ce80de515ff74181ac59
Opcode Fuzzy Hash: 6aebf3955f5852d03141b54ac61140722e436ed26eee0c70a191a1ba19a04952
Instruction Fuzzy Hash: F2619A61E0C78A89F7149F60D8801BA33B2EF0A798F404235DA5E92795EF38A545EB12

Function 00007FF639B7F654 Relevance: 23.1, APIs: 11, Strings: 2, Instructions: 346
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF639B71BAC: free.MSVCRT ref: 00007FF639B71BC2

malloc.MSVCRT ref: 00007FF639B7F90B
sscanf.MSVCRT ref: 00007FF639B7F95C
sscanf.MSVCRT ref: 00007FF639B7F982
InitializeCriticalSection.KERNEL32 ref: 00007FF639B7F9C3
inet_addr.WS2_32 ref: 00007FF639B7F9EB
free.MSVCRT ref: 00007FF639B7FAD8
free.MSVCRT ref: 00007FF639B7FAE3
memset.MSVCRT ref: 00007FF639B7FB5C
sscanf.MSVCRT ref: 00007FF639B7FB97
_mkgmtime.MSVCRT ref: 00007FF639B7FBAF
time.MSVCRT ref: 00007FF639B7FBEA

Strings

gfffffff, xrefs: 00007FF639B7FAA2
%04d-%02d-%02d %02d:%02d:%02d, xrefs: 00007FF639B7FB8D

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: freesscanf$CriticalInitializeSection_mkgmtimeinet_addrmallocmemsettime
String ID: %04d-%02d-%02d %02d:%02d:%02d$gfffffff
API String ID: 1162402541-2325642954
Opcode ID: b8294c291af995fff443a20bb04a3435341f499c10ad9f9a9cc1ab6ab2549de2
Instruction ID: 5aa0994613e2c6321e6cd07b34e7a82bcc7e42d62645cba745dd65de86c517a3
Opcode Fuzzy Hash: b8294c291af995fff443a20bb04a3435341f499c10ad9f9a9cc1ab6ab2549de2
Instruction Fuzzy Hash: 9DF1BF72A18B8A96EB14CF74D8402EE73A2FF4A754F004236DA5E93B98DF38D544DB01

Function 00007FF639B81590 Relevance: 19.8, APIs: 2, Strings: 11, Instructions: 309
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memcmp.MSVCRT ref: 00007FF639B8166C

Part of subcall function 00007FF639B71BAC: free.MSVCRT ref: 00007FF639B71BC2

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

malloc.MSVCRT ref: 00007FF639B81876

Strings

Error while establishing TLS with '%s', xrefs: 00007FF639B818E7
.onion, xrefs: 00007FF639B816A8
Sending request..., xrefs: 00007FF639B81845
Response received..., xrefs: 00007FF639B819BA
Error while creating the onion stream, xrefs: 00007FF639B81A1A
https://, xrefs: 00007FF639B81665
Creating stream..., xrefs: 00007FF639B817B6
Created..., xrefs: 00007FF639B81830
Creating onion stream..., xrefs: 00007FF639B81717
Received empty response!, xrefs: 00007FF639B819C8
Accessing '%s', xrefs: 00007FF639B81681

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CurrentLocalThreadTime_cwprintf_s_lfreemallocmemcmp
String ID: .onion$Accessing '%s'$Created...$Creating onion stream...$Creating stream...$Error while creating the onion stream$Error while establishing TLS with '%s'$Received empty response!$Response received...$Sending request...$https://
API String ID: 3650025451-2257922318
Opcode ID: d5653f286ae6193be0b1bf6ede19303c3f193cb3d33bf124b4fe65347f0b8752
Instruction ID: 292739ab3bb38ebc3600749c1d6357f137a5e04042eb738802e24387fa1cbcf5
Opcode Fuzzy Hash: d5653f286ae6193be0b1bf6ede19303c3f193cb3d33bf124b4fe65347f0b8752
Instruction Fuzzy Hash: 34E18F76B19B8A86EB00CF64E4401AF73B6FB89788B104136DE8E93B58DF38D155D741

Function 00007FF639B7605C Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 86
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

gethostbyname.WS2_32 ref: 00007FF639B7607A
htons.WS2_32 ref: 00007FF639B76099
memmove.MSVCRT(?,?,?,?,?,?,?,00007FF639B755E6), ref: 00007FF639B760B5
socket.WS2_32 ref: 00007FF639B760CA
setsockopt.WS2_32 ref: 00007FF639B76102
setsockopt.WS2_32 ref: 00007FF639B7614C
connect.WS2_32 ref: 00007FF639B76179
WSAGetLastError.WS2_32 ref: 00007FF639B76184

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

Strings

tcp_socket::connect connect error: %i, xrefs: 00007FF639B7618A
tcp_socket::connect setsockopt SO_RCVTIMEO error: %i, xrefs: 00007FF639B7611B
tcp_socket::connect setsockopt SO_SNDTIMEO error: %i, xrefs: 00007FF639B76159

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: setsockopt$CurrentErrorLastLocalThreadTime_cwprintf_s_lconnectgethostbynamehtonsmemmovesocket
String ID: tcp_socket::connect connect error: %i$tcp_socket::connect setsockopt SO_RCVTIMEO error: %i$tcp_socket::connect setsockopt SO_SNDTIMEO error: %i
API String ID: 2396662901-3524291084
Opcode ID: eeae2f9c6837806d00ce99c45ddce5d3dd9529a0fa26bceb3562cab75d4b1bff
Instruction ID: 0c7b030e47e332d341e073510f0a38a8b02c469d383a8122cfaedf1469681ae4
Opcode Fuzzy Hash: eeae2f9c6837806d00ce99c45ddce5d3dd9529a0fa26bceb3562cab75d4b1bff
Instruction Fuzzy Hash: A741B475A0C68AC2E710AF21E4001AF77A2FF89B94F005231EA5E83B95CF3CD545DB42

Function 00007FF639B7EDE0 Relevance: 18.2, APIs: 7, Strings: 5, Instructions: 232
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF639B7F42C: malloc.MSVCRT ref: 00007FF639B7F483
Part of subcall function 00007FF639B7F42C: memmove.MSVCRT ref: 00007FF639B7F4B2
Part of subcall function 00007FF639B7F42C: CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F4D9
Part of subcall function 00007FF639B7F42C: free.MSVCRT ref: 00007FF639B7F4E2
Part of subcall function 00007FF639B7F42C: CryptCreateHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F504
Part of subcall function 00007FF639B7F42C: memset.MSVCRT ref: 00007FF639B7F51F
Part of subcall function 00007FF639B7F42C: CryptSetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F532
Part of subcall function 00007FF639B7F42C: CryptHashData.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F560
Part of subcall function 00007FF639B7F42C: CryptGetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F58B
Part of subcall function 00007FF639B7F42C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F5AA

Part of subcall function 00007FF639B7F42C: CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F5BD
Part of subcall function 00007FF639B7F42C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F5D0

memcmp.MSVCRT ref: 00007FF639B7F0FF

Part of subcall function 00007FF639B7F208: free.MSVCRT ref: 00007FF639B7F37E

free.MSVCRT ref: 00007FF639B7F19C
free.MSVCRT ref: 00007FF639B7F1A7
free.MSVCRT ref: 00007FF639B7F1B5
free.MSVCRT ref: 00007FF639B7F1C0
free.MSVCRT ref: 00007FF639B7F1CE
free.MSVCRT ref: 00007FF639B7F1DC

Strings

ntor-curve25519-sha256-1:key_extract, xrefs: 00007FF639B7F108
ntor-curve25519-sha256-1:key_expand, xrefs: 00007FF639B7F12B
Server, xrefs: 00007FF639B7F047
ntor-curve25519-sha256-1:mac, xrefs: 00007FF639B7F0AA
ntor-curve25519-sha256-1:verify, xrefs: 00007FF639B7EFAB

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: Cryptfree$Hash$Destroy$Param$CreateDataImportmallocmemcmpmemmovememset
String ID: Server$ntor-curve25519-sha256-1:key_expand$ntor-curve25519-sha256-1:key_extract$ntor-curve25519-sha256-1:mac$ntor-curve25519-sha256-1:verify
API String ID: 1927060387-216614166
Opcode ID: 054ac203b267cb522e1d5ff246917a057c24a11baaa9908d488c5043121b417d
Instruction ID: e62a3f03acb788ececa8d96bd3a7166e477cbeb12611e821e279cdcb0b48943d
Opcode Fuzzy Hash: 054ac203b267cb522e1d5ff246917a057c24a11baaa9908d488c5043121b417d
Instruction Fuzzy Hash: EDD10A32929FC9C9D7409F64E8805DA73B5FB89758F106226EE8E52B29EF38D184C740

Function 00007FF639B7894C Relevance: 16.7, APIs: 2, Strings: 9, Instructions: 245
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

free.MSVCRT ref: 00007FF639B78D02
free.MSVCRT ref: 00007FF639B78D0D

Strings

circuit::handle_extended2_cell() extend node [ %s ] has invalid crypto state, xrefs: 00007FF639B78CE1
tor_stream::increment_package_window() [ _package_window = %u ], xrefs: 00007FF639B78A92
(MSB set), xrefs: 00007FF639B789A7
circuit::handle_relay_end_cell() [stream: %u, reason: %u], xrefs: 00007FF639B78B42
circuit::handle_extended2_cell() extend node is null, xrefs: 00007FF639B78C43
circuit::handle_relay_truncated_cell() destroying circuit, xrefs: 00007FF639B78BBE
tor_socket::recv_cell() [circuit: %i%s [%X], stream: %u, command: %u, relay_command: %u, payload_size: %u], xrefs: 00007FF639B789DE
circuit_node::increment_package_window() [ _package_window = %u ], xrefs: 00007FF639B78A5D
tor_socket::recv_cell() !! unhandled relay cell [ relay_command: %u ], xrefs: 00007FF639B78BEE

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_l
String ID: (MSB set)$circuit::handle_extended2_cell() extend node [ %s ] has invalid crypto state$circuit::handle_extended2_cell() extend node is null$circuit::handle_relay_end_cell() [stream: %u, reason: %u]$circuit::handle_relay_truncated_cell() destroying circuit$circuit_node::increment_package_window() [ _package_window = %u ]$tor_socket::recv_cell() !! unhandled relay cell [ relay_command: %u ]$tor_socket::recv_cell() [circuit: %i%s [%X], stream: %u, command: %u, relay_command: %u, payload_size: %u]$tor_stream::increment_package_window() [ _package_window = %u ]
API String ID: 2601393797-2081185039
Opcode ID: 0538e25982fe5b97a3f2e18869d2afb9193fe3ce91f42f758201cd917e08753e
Instruction ID: 0591d2376d341ccb4d0aac3713c816099cad07d674e2097f27a1aad9b9f58b6e
Opcode Fuzzy Hash: 0538e25982fe5b97a3f2e18869d2afb9193fe3ce91f42f758201cd917e08753e
Instruction Fuzzy Hash: 70B1B372A0C68A86E7149F65D4801BE63A2FF86B94F448235DB4F97B94DF3CD501EB02

Function 00007FF639B81294 Relevance: 16.0, APIs: 2, Strings: 7, Instructions: 201
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

inet_ntoa.WS2_32 ref: 00007FF639B812DB
inet_ntoa.WS2_32 ref: 00007FF639B81434

Strings

Extended..., xrefs: 00007FF639B814FB
Error when extending!, xrefs: 00007FF639B81559
Connecting to node #%u: '%s' (%s:%u), xrefs: 00007FF639B8132E
Error while creating circuit!, xrefs: 00007FF639B81412
Extending to node #%u: '%s' (%s:%u), xrefs: 00007FF639B81487
Connected..., xrefs: 00007FF639B81404
Error while connecting!, xrefs: 00007FF639B81423

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: inet_ntoa
String ID: Connected...$Connecting to node #%u: '%s' (%s:%u)$Error when extending!$Error while connecting!$Error while creating circuit!$Extended...$Extending to node #%u: '%s' (%s:%u)
API String ID: 1879540557-1880961314
Opcode ID: 85c262f1bc1cf95f391f4a5388b4ae60011f5c3f4865de7639e9966e2911a433
Instruction ID: 8bc5d956a2214e5b7e230986f72f45adb2ea4c9d85dcf9150f19872326e65ea2
Opcode Fuzzy Hash: 85c262f1bc1cf95f391f4a5388b4ae60011f5c3f4865de7639e9966e2911a433
Instruction Fuzzy Hash: 7391D072A19B8A86E714CF55D4402AF73A2FB4AB90F044236DA5F93B94DF3CE441DB41

Function 00007FF639B713B4 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 164
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNEL32 ref: 00007FF639B713F4
RegOpenKeyExA.KERNELBASE ref: 00007FF639B71423
RegQueryInfoKeyA.ADVAPI32 ref: 00007FF639B71472
RegCloseKey.ADVAPI32 ref: 00007FF639B71481
RegEnumValueA.KERNELBASE ref: 00007FF639B71509
free.MSVCRT ref: 00007FF639B715BE
RegSetValueExA.KERNELBASE ref: 00007FF639B715F1
RegCloseKey.KERNELBASE ref: 00007FF639B715FC

Strings

SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xrefs: 00007FF639B71415

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CloseValue$EnumFileInfoModuleNameOpenQueryfree
String ID: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
API String ID: 2654051921-3913687870
Opcode ID: d83ce38537b77fa389110b2b141a9d4c59facbcaa7e63bafc99b2f0c3a6f0ee0
Instruction ID: b1b4bb5462a15cdf92515361a466eb722597d6a329242eb911b3bb0c61d78da3
Opcode Fuzzy Hash: d83ce38537b77fa389110b2b141a9d4c59facbcaa7e63bafc99b2f0c3a6f0ee0
Instruction Fuzzy Hash: 40716232A18B4989E710CF75E8805AF77B6FB99794F100235EA9E93B98DF38D540DB00

Function 00007FF639B82520 Relevance: 15.2, APIs: 3, Strings: 7, Instructions: 201
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

sscanf.MSVCRT ref: 00007FF639B8269C
malloc.MSVCRT ref: 00007FF639B82719
free.MSVCRT ref: 00007FF639B8279A

Part of subcall function 00007FF639B71ED0: free.MSVCRT ref: 00007FF639B71F12

Strings

%s, xrefs: 00007FF639B825AD
bad URL info: %s, xrefs: 00007FF639B82662
http://pm2pavba27wr4m34.onion/command.txt?sh11, xrefs: 00007FF639B8258A
cached-consensus, xrefs: 00007FF639B8252D
Get pings..., xrefs: 00007FF639B82568
gfffffff, xrefs: 00007FF639B82621
gfffffff, xrefs: 00007FF639B827B8

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_lmallocsscanf
String ID: %s$Get pings...$bad URL info: %s$cached-consensus$gfffffff$gfffffff$http://pm2pavba27wr4m34.onion/command.txt?sh11
API String ID: 3228243443-2334344250
Opcode ID: b68d5b157cb4886688903b006b4151e6412328640db98cc885b77073584c03b6
Instruction ID: 41d6fa8e9878b2793bdc4bb675385f219e773aae6c755aecf619435c0b673992
Opcode Fuzzy Hash: b68d5b157cb4886688903b006b4151e6412328640db98cc885b77073584c03b6
Instruction Fuzzy Hash: C691BE72A09B8A86EB14CF65E4403EE73B1FB49798F404632DA9E837A4DF38D149C701

Function 00007FF639B7CA50 Relevance: 13.7, APIs: 4, Strings: 5, Instructions: 211COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF639B7CAE0
free.MSVCRT ref: 00007FF639B7CC76
free.MSVCRT ref: 00007FF639B7CD20
free.MSVCRT ref: 00007FF639B7CD2B

Strings

socket_buffer.read(command) != sizeof(cell_command), xrefs: 00007FF639B7CB5A
socket_buffer.read<payload_size_type>(payload_size) != sizeof(payload_size_type), xrefs: 00007FF639B7CBF7
socket_buffer.read(circuit_id_v3) != sizeof(circuit_id_v3_type), xrefs: 00007FF639B7CAC1
socket_buffer.read(payload.get_buffer(), payload_size) != payload_size, xrefs: 00007FF639B7CC5C
socket_buffer.read(circuit_id) != sizeof(circuit_id_type), xrefs: 00007FF639B7CBC3

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$memset
String ID: socket_buffer.read(circuit_id) != sizeof(circuit_id_type)$socket_buffer.read(circuit_id_v3) != sizeof(circuit_id_v3_type)$socket_buffer.read(command) != sizeof(cell_command)$socket_buffer.read(payload.get_buffer(), payload_size) != payload_size$socket_buffer.read<payload_size_type>(payload_size) != sizeof(payload_size_type)
API String ID: 2717317152-1323880483
Opcode ID: 8618753bb074736371d3759156b7bb80da331e751738d949680ebec2e04cf989
Instruction ID: fb44a69b26135fdc6dfdf67cbcca12850077b47c447e24c95cf142e82f1ce327
Opcode Fuzzy Hash: 8618753bb074736371d3759156b7bb80da331e751738d949680ebec2e04cf989
Instruction Fuzzy Hash: 9B91B162B09A898AE710DF74D4401AD37B2FB0AB98B144235DF6EA3B98CF38D515D741

Function 00007FF639B77134 Relevance: 13.7, APIs: 4, Strings: 5, Instructions: 159COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF639B7723E
free.MSVCRT ref: 00007FF639B77326

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

Strings

circuit::create_ntor() [or: %s, state: created], xrefs: 00007FF639B77358
circuit::create_ntor() extend node isn't null, xrefs: 00007FF639B771CE
circuit::create_ntor() [or: %s, state: destroyed], xrefs: 00007FF639B77368
circuit::create_ntor() [or: %s does not support NTOR handshake], xrefs: 00007FF639B77185
circuit::create_ntor() [or: %s, state: creating], xrefs: 00007FF639B7719B

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_l
String ID: circuit::create_ntor() [or: %s does not support NTOR handshake]$circuit::create_ntor() [or: %s, state: created]$circuit::create_ntor() [or: %s, state: creating]$circuit::create_ntor() [or: %s, state: destroyed]$circuit::create_ntor() extend node isn't null
API String ID: 2601393797-3117506111
Opcode ID: f441a1bb1975ac9bc5679b9436f953e3af71ddab007f9b796473477eb3d63ef4
Instruction ID: afe6652a840967bc1a373bb19c3c549770e025f9b1980ee8811a6e0476d3419f
Opcode Fuzzy Hash: f441a1bb1975ac9bc5679b9436f953e3af71ddab007f9b796473477eb3d63ef4
Instruction Fuzzy Hash: E0719F22A08B8AC5E710DF64D4402EE33B2FB8A798F404236DA5E97798DF3CD245DB41

Function 00007FF639B7C4E0 Relevance: 13.6, APIs: 5, Strings: 4, Instructions: 146COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF639B7C523
free.MSVCRT ref: 00007FF639B7C635
free.MSVCRT ref: 00007FF639B7C663

Strings

tor_socket::recv_net_info(), xrefs: 00007FF639B7C6B7
tor_socket::send_versions(), xrefs: 00007FF639B7C5DB
tor_socket::recv_versions(), xrefs: 00007FF639B7C63B
Invalid handshake, xrefs: 00007FF639B7C669

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$malloc
String ID: Invalid handshake$tor_socket::recv_net_info()$tor_socket::recv_versions()$tor_socket::send_versions()
API String ID: 2190258309-3974360583
Opcode ID: 4803aa52bb1eabd93a66ea38f10aad959ed91127a4719796954a5d1ccdb0884b
Instruction ID: 3616edf6d65856535dee46e633d58e8b50c543d1c706a3b5e398d02035ece9c8
Opcode Fuzzy Hash: 4803aa52bb1eabd93a66ea38f10aad959ed91127a4719796954a5d1ccdb0884b
Instruction Fuzzy Hash: E9518F62A18A5A85FB04DF65D8501FE2372BF4AB98F044239DE4EA3B95DF3CD4069701

Function 00007FF639B773B8 Relevance: 12.3, APIs: 3, Strings: 5, Instructions: 271COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF639B774C5

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

Strings

circuit::extend_ntor() [or: %s, state: extending], xrefs: 00007FF639B7741C
circuit::extend_ntor() extend node isn't null, xrefs: 00007FF639B77450
circuit::extend_ntor() [or: %s, state: destroyed], xrefs: 00007FF639B7774E
circuit::extend_ntor() [or: %s does not support NTOR handshake], xrefs: 00007FF639B77404
circuit::extend_ntor() [or: %s, state: extended], xrefs: 00007FF639B7773E

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CurrentLocalThreadTime_cwprintf_s_lfree
String ID: circuit::extend_ntor() [or: %s does not support NTOR handshake]$circuit::extend_ntor() [or: %s, state: destroyed]$circuit::extend_ntor() [or: %s, state: extended]$circuit::extend_ntor() [or: %s, state: extending]$circuit::extend_ntor() extend node isn't null
API String ID: 489237203-3214179444
Opcode ID: 372e7e37d09720c79ab0c94f3e8d8e4666e83de7cf74729cf7fffa2bea1c5638
Instruction ID: 19bf90d650b531b16217e20a905a7ebe7a3973476bbcde9bc79c88b73863fc8c
Opcode Fuzzy Hash: 372e7e37d09720c79ab0c94f3e8d8e4666e83de7cf74729cf7fffa2bea1c5638
Instruction Fuzzy Hash: 87C18362B04A899AEB00DF78D4441ED73B2FF45BA8B504236DB2E97BD9EE38D104D741

Function 00007FF639B75A64 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 125COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF639B75AE9
malloc.MSVCRT ref: 00007FF639B75AFB
InitSecurityInterfaceA.SECUR32 ref: 00007FF639B75B18
atexit.MSVCRT ref: 00007FF639B75B2C
memset.MSVCRT ref: 00007FF639B75C2C

Strings

Microsoft Unified Security Protocol Provider, xrefs: 00007FF639B75C6A

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: malloc$InitInterfaceSecurityatexitmemset
String ID: Microsoft Unified Security Protocol Provider
API String ID: 1208695405-238809041
Opcode ID: 062a7dcbb5eadb261bdfbfe3365e78cafdb4f44dc0e02de7de984dcda699f127
Instruction ID: 5aea9fb33600c492ece8ce5790c2d6ae1c07e99e019f4d790d64e83f7044abb2
Opcode Fuzzy Hash: 062a7dcbb5eadb261bdfbfe3365e78cafdb4f44dc0e02de7de984dcda699f127
Instruction Fuzzy Hash: 1A511372A05B85CAE3548F64E84039E33B9F749B68F148239DE9D97798EF38C0A4C750

Function 00007FF639B7A42C Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 153COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE ref: 00007FF639B7A481
free.MSVCRT ref: 00007FF639B7A59F
time.MSVCRT ref: 00007FF639B7A5D4

Strings

cached-consensus, xrefs: 00007FF639B7A438
/tor/status-vote/current/consensus, xrefs: 00007FF639B7A49E

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: AttributesFilefreetime
String ID: /tor/status-vote/current/consensus$cached-consensus
API String ID: 1606450062-1934959206
Opcode ID: f64d5b6393a68ee7bc559004e0857bb9b0f85b1e9cc8fa128122772b920ccc62
Instruction ID: 6b2865d0fec01a5026fd8f019b2ce872679e5a0d2a1a44023f6f618f356cca44
Opcode Fuzzy Hash: f64d5b6393a68ee7bc559004e0857bb9b0f85b1e9cc8fa128122772b920ccc62
Instruction Fuzzy Hash: F3616C32F08B4989F700CFA5D4401AE7372BB55B98B104636DE4EA7BA8DF39D496D740

Function 00007FF639B77EE0 Relevance: 7.6, APIs: 2, Strings: 3, Instructions: 117COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF639B7805F
free.MSVCRT ref: 00007FF639B7806A

Strings

(MSB set), xrefs: 00007FF639B77FBC
circuit::send_relay_cell() attempt to send cell to non-existent stream-id: %u, xrefs: 00007FF639B77F90
tor_socket::send_cell() [circuit: %i%s [%X], stream: %u, command: %i, relay_command: %i], xrefs: 00007FF639B77FF0

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free
String ID: (MSB set)$circuit::send_relay_cell() attempt to send cell to non-existent stream-id: %u$tor_socket::send_cell() [circuit: %i%s [%X], stream: %u, command: %i, relay_command: %i]
API String ID: 1294909896-2545454300
Opcode ID: 6cb525eafdbe074bd81a2014da1d4c21dedde1901dc51fafceb222652d456062
Instruction ID: ddf41d86898ab5431ad39abbe245507b46fb9e7bd58e40907df20f5262a80ba2
Opcode Fuzzy Hash: 6cb525eafdbe074bd81a2014da1d4c21dedde1901dc51fafceb222652d456062
Instruction Fuzzy Hash: 05512332A08A8586E700DF35D4405AE7371FF9ABA8F054235EE5E937A8CF38D545DB40

Function 00007FF639B7227C Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(?,?,?,00007FF639B72356), ref: 00007FF639B72295
CommandLineToArgvW.SHELL32(?,?,?,00007FF639B72356), ref: 00007FF639B722A5
malloc.MSVCRT ref: 00007FF639B722B9
malloc.MSVCRT ref: 00007FF639B722ED
wcstombs.MSVCRT(?,?,?,00007FF639B72356), ref: 00007FF639B7230E

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CommandLinemalloc$Argvwcstombs
String ID:
API String ID: 175250670-0
Opcode ID: 636ccd5f01464c353baf4956920b5dbdc711e6a3ba087fd24f89c0110948d378
Instruction ID: e9552f9748dd8b462c6a8f77265862067d623e2009dae8ce1fdc2515c1a49464
Opcode Fuzzy Hash: 636ccd5f01464c353baf4956920b5dbdc711e6a3ba087fd24f89c0110948d378
Instruction Fuzzy Hash: 80115C31A1CA8EC1E7049F11E94006A7362FB59FD0B045272CA9FD73A5CE3DE485EB01

Function 00007FF639B7CD74 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 176COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

time.MSVCRT ref: 00007FF639B7CDBA
free.MSVCRT ref: 00007FF639B7CFA8
free.MSVCRT ref: 00007FF639B7CFB7

Strings

tor_socket::send_net_info(), xrefs: 00007FF639B7CD9D

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_ltime
String ID: tor_socket::send_net_info()
API String ID: 1526019956-2499986577
Opcode ID: da2bab47c4ff57e54c41f07cd9fa0fcd3daba95c8203398aadb6085517c48727
Instruction ID: e1eec4e29204035175733de20391f9eef63835781437ae993257a1ef4a3fa680
Opcode Fuzzy Hash: da2bab47c4ff57e54c41f07cd9fa0fcd3daba95c8203398aadb6085517c48727
Instruction Fuzzy Hash: 63716B72B05B899AEB00DFB4D4481DD77B2EB45BA8B400675DF2EA7B98EE34E105C341

Function 00007FF639B784D0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 00007FF639B784ED

Part of subcall function 00007FF639B7D094: free.MSVCRT ref: 00007FF639B7D28A

GetTickCount.KERNEL32 ref: 00007FF639B7850D

Strings

timeout, xrefs: 00007FF639B7851D

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CountTick$free
String ID: timeout
API String ID: 3830800293-743945614
Opcode ID: 1111ac1303a8cb7038f07f92f1262d63f022e769b0cdb5830cbc3d127fe02e19
Instruction ID: 5e5d6a60ae9080c7fa4cbed0fbf477e5d3cb5c3b0740a799fc60c9f19574a5fb
Opcode Fuzzy Hash: 1111ac1303a8cb7038f07f92f1262d63f022e769b0cdb5830cbc3d127fe02e19
Instruction Fuzzy Hash: 5A01D23191CA8B81EB50DF25A44107B63A2EF8A794F145235D95FC379ACE3CD441EF02

Function 00007FF639B75040 Relevance: 5.2, APIs: 4, Instructions: 154COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF639B7508F
memmove.MSVCRT ref: 00007FF639B750C8
memmove.MSVCRT ref: 00007FF639B750E2
memmove.MSVCRT ref: 00007FF639B75243

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 29eed408886a033e9e71fb567107c333dcdf83abf3fb1affb8e8a88f50fd84bf
Instruction ID: 850dacb27d0fe39756941e54e3a57d9d9e94d0259e4718ac13b482601010d2b8
Opcode Fuzzy Hash: 29eed408886a033e9e71fb567107c333dcdf83abf3fb1affb8e8a88f50fd84bf
Instruction Fuzzy Hash: 0671C032B09B8996EB58CFA5C5443AD73A5FB06B94F148236CB2D53B80DF78E461DB01

Function 00007FF639B7F208 Relevance: 5.1, APIs: 4, Instructions: 138COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B7F42C: malloc.MSVCRT ref: 00007FF639B7F483
Part of subcall function 00007FF639B7F42C: memmove.MSVCRT ref: 00007FF639B7F4B2
Part of subcall function 00007FF639B7F42C: CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F4D9
Part of subcall function 00007FF639B7F42C: free.MSVCRT ref: 00007FF639B7F4E2
Part of subcall function 00007FF639B7F42C: CryptCreateHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F504
Part of subcall function 00007FF639B7F42C: memset.MSVCRT ref: 00007FF639B7F51F
Part of subcall function 00007FF639B7F42C: CryptSetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F532
Part of subcall function 00007FF639B7F42C: CryptHashData.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F560
Part of subcall function 00007FF639B7F42C: CryptGetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F58B
Part of subcall function 00007FF639B7F42C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F5AA

Part of subcall function 00007FF639B78E54: memmove.MSVCRT ref: 00007FF639B78EAB

Part of subcall function 00007FF639B7F42C: CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F5BD
Part of subcall function 00007FF639B7F42C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF639B7EFE4), ref: 00007FF639B7F5D0

free.MSVCRT ref: 00007FF639B7F37E
free.MSVCRT ref: 00007FF639B7F3C5
free.MSVCRT ref: 00007FF639B7F3E0
free.MSVCRT ref: 00007FF639B7F3FB

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: Crypt$Hash$free$Destroy$Parammemmove$CreateDataImportmallocmemset
String ID:
API String ID: 3037252780-0
Opcode ID: b9e595c113cc44701fa8bf95669261ba78cea5e5ed37d40c8bd4f20c21f850e3
Instruction ID: 2f590ca3d0ab1815187ad6cace04ebb1d24085abb9c55010ae55c086e8866531
Opcode Fuzzy Hash: b9e595c113cc44701fa8bf95669261ba78cea5e5ed37d40c8bd4f20c21f850e3
Instruction Fuzzy Hash: 9C515233A18BC586E7018F69E8400AEB7B0FB89B68F155225EFD953B58DF38D585C740

Function 00007FF639B81A6C Relevance: 4.8, APIs: 1, Strings: 2, Instructions: 257COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF639B81E63

Part of subcall function 00007FF639B71BAC: free.MSVCRT ref: 00007FF639B71BC2

Strings

Trying to build new circuit..., xrefs: 00007FF639B81E3E
cached-consensus, xrefs: 00007FF639B81A7E

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free
String ID: Trying to build new circuit...$cached-consensus
API String ID: 1294909896-1511346022
Opcode ID: 5daf116d1134fae6aaf36b835a99305536a70d5b2926325f728bd5962636fe09
Instruction ID: 10ce639d4e7ac103aafb9a288661b7962d31033037c73e0febc51b943c9fbe6e
Opcode Fuzzy Hash: 5daf116d1134fae6aaf36b835a99305536a70d5b2926325f728bd5962636fe09
Instruction Fuzzy Hash: 46C15D3261EBC985DA64CF54E4842AFB365FB8AB80F504236DA8E83B54EF38C555CB01

Function 00007FF639B7D094 Relevance: 4.7, APIs: 1, Strings: 2, Instructions: 155COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B7CA50: memset.MSVCRT ref: 00007FF639B7CAE0

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

free.MSVCRT ref: 00007FF639B7D28A

Strings

tor_socket::recv_cell_iteration() !! received invalid cell, closing stream, xrefs: 00007FF639B7D0D3
tor_socket::recv_cell_iteration() !! received cell for non-existent circuit-id: %X, xrefs: 00007FF639B7D22C

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CurrentLocalThreadTime_cwprintf_s_lfreememset
String ID: tor_socket::recv_cell_iteration() !! received cell for non-existent circuit-id: %X$tor_socket::recv_cell_iteration() !! received invalid cell, closing stream
API String ID: 1383866297-1620486077
Opcode ID: 212083ddafc71513217ea83c0c1db7b026ff50cfb764f7c39ac221cad83ee3f3
Instruction ID: 76f69a07fa106b52670c64875612fa995a29dcb506319678c10f978c923abe31
Opcode Fuzzy Hash: 212083ddafc71513217ea83c0c1db7b026ff50cfb764f7c39ac221cad83ee3f3
Instruction Fuzzy Hash: 78617F77B05B458AEB10CF65C4802AD33A2FB89BD8B148235DA1E93B94DF3CD942DB41

Function 00007FF639B76B08 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 119COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B72B6C: memmove.MSVCRT ref: 00007FF639B72C28
Part of subcall function 00007FF639B72B6C: memmove.MSVCRT ref: 00007FF639B72C5A
Part of subcall function 00007FF639B72B6C: memmove.MSVCRT ref: 00007FF639B72CB7

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

Part of subcall function 00007FF639B7B17C: free.MSVCRT ref: 00007FF639B7B1F3
Part of subcall function 00007FF639B7B17C: free.MSVCRT ref: 00007FF639B7B1FE
Part of subcall function 00007FF639B7B17C: free.MSVCRT ref: 00007FF639B7B209
Part of subcall function 00007FF639B7B17C: memcmp.MSVCRT ref: 00007FF639B7B25C
Part of subcall function 00007FF639B7B17C: free.MSVCRT ref: 00007FF639B7B2C4
Part of subcall function 00007FF639B7B17C: free.MSVCRT ref: 00007FF639B7B2DB

free.MSVCRT ref: 00007FF639B76C9A
free.MSVCRT ref: 00007FF639B76CA5

Strings

hidden_service() [%s.onion], xrefs: 00007FF639B76BCE

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$memmove$CurrentLocalThreadTime_cwprintf_s_lmemcmp
String ID: hidden_service() [%s.onion]
API String ID: 1173836548-1866994827
Opcode ID: 599c7e0214bbc0b5320a4e2fd9d730736f4f4e0b911718b840b64e68018f555f
Instruction ID: b0c92b4cdcbaf72c94c872e82ed8fa500c3a3b64510ce2da46ba0f4da339fdd6
Opcode Fuzzy Hash: 599c7e0214bbc0b5320a4e2fd9d730736f4f4e0b911718b840b64e68018f555f
Instruction Fuzzy Hash: 8E516D73A18B8586E7109F64E4803AEB361FB8A794F109326EB9E53799DF3CD554CB00

Function 00007FF639B7FC4C Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 118COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF639B7FCED
free.MSVCRT ref: 00007FF639B7FD71

Strings

gfffffff, xrefs: 00007FF639B7FC7E

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: freemalloc
String ID: gfffffff
API String ID: 3061335427-1523873471
Opcode ID: de7df1c6bc8f2e50def95bc419466b8504cc1a9bd2169939be60953d27a7661d
Instruction ID: a43976ada387a0d340988de86960bcc95d9d799d79ffb476c2cbdc7452840184
Opcode Fuzzy Hash: de7df1c6bc8f2e50def95bc419466b8504cc1a9bd2169939be60953d27a7661d
Instruction Fuzzy Hash: 225124B6A05F8882DB04CF52E8403A973A4F358BD8F108626EEAD87754DF38D5A5C381

Function 00007FF639B75F34 Relevance: 3.0, APIs: 2, Instructions: 30networkCOMMON

Download Yara Rule

APIs

WSAStartup.WS2_32 ref: 00007FF639B75F96
atexit.MSVCRT ref: 00007FF639B75FA3

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: Startupatexit
String ID:
API String ID: 549365519-0
Opcode ID: 56e459ee09a98d017ffa9f395f0ad20b2f941f419292dfe2e3568e4c1c9cedf3
Instruction ID: 57b7fc6e462306adc2c8e1f84e779160d0a6f97f2e936cccca09a65d5b0dd654
Opcode Fuzzy Hash: 56e459ee09a98d017ffa9f395f0ad20b2f941f419292dfe2e3568e4c1c9cedf3
Instruction Fuzzy Hash: C6014832519B4AC1DB14AF64E84002A7369FB4A738B504335DABE873E4EF38D596DB41

Function 00007FF639B7D83C Relevance: 2.6, APIs: 2, Instructions: 65COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF639B7D8A7
free.MSVCRT ref: 00007FF639B7D90A

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: freememmove
String ID:
API String ID: 2988784210-0
Opcode ID: 7281b402c2289f3b3854d56fd73178642de3dd5b6298cd8ef1291bc81c1f843c
Instruction ID: dcb778111e4bb2259ba204e16c8699b1d94ca1f043b7c3680ef1afc1158eb47e
Opcode Fuzzy Hash: 7281b402c2289f3b3854d56fd73178642de3dd5b6298cd8ef1291bc81c1f843c
Instruction Fuzzy Hash: 4A311476B14B5496EB04CF66E9800AD3375FB48BD4B189225DF5EA3B58CF34E5A1C700

Function 00007FF639B720F8 Relevance: 2.6, APIs: 2, Instructions: 62COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF639B7213E
free.MSVCRT ref: 00007FF639B721B5

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: f5f5b6a4d2f0d5135d721687da0bf41553a4098c9452ff204767c330f2461de7
Instruction ID: cb5af4093a05f9c07e3fb991911646b0de1ac87782d2d03498a9bf39dcc195d6
Opcode Fuzzy Hash: f5f5b6a4d2f0d5135d721687da0bf41553a4098c9452ff204767c330f2461de7
Instruction Fuzzy Hash: BE211476A05B88C6CB088F55E844259B3A1F358FE4F24472ADBAD47394CF34C5A6C380

Function 00007FF639B7B0A8 Relevance: 2.6, APIs: 2, Instructions: 60COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF639B7B0F5

Part of subcall function 00007FF639B799F4: CryptHashData.ADVAPI32 ref: 00007FF639B79B76

free.MSVCRT ref: 00007FF639B7B163

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDataHashfreemalloc
String ID:
API String ID: 4030236771-0
Opcode ID: eda6b35b4f43785f497b5a90bc3a6fbc4847cdbaccb83d9dde591becca08a395
Instruction ID: 1a99a03a642e69c17db9b687057db6075d0ada8f7b16f611a03b234ac05e020f
Opcode Fuzzy Hash: eda6b35b4f43785f497b5a90bc3a6fbc4847cdbaccb83d9dde591becca08a395
Instruction Fuzzy Hash: ED212A72B14B558AEB04CFA5E8804AC3371FB49B58B144729EE6EA3B98DF34D591C740

Function 00007FF639B7C15C Relevance: 2.5, APIs: 2, Instructions: 49COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF639B7C183
LeaveCriticalSection.KERNEL32 ref: 00007FF639B7C204

Part of subcall function 00007FF639B71BAC: free.MSVCRT ref: 00007FF639B71BC2

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CriticalSection$EnterLeavefree
String ID:
API String ID: 4020351045-0
Opcode ID: ff2a8dc36760ae7b31fef743547374cb4594d53cb42e258d239bcb0df973ac2d
Instruction ID: fd721d09106cad80c529511d64d05ac10e0cb74de18d09b3dc902861685fcd4f
Opcode Fuzzy Hash: ff2a8dc36760ae7b31fef743547374cb4594d53cb42e258d239bcb0df973ac2d
Instruction Fuzzy Hash: E8115E62B24B6988FB00DFB4E8801ED3370FB4AB68F145225DF5A66759DF38C084C700

Function 00007FF639B72074 Relevance: 2.5, APIs: 2, Instructions: 34COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF639B720A6
free.MSVCRT ref: 00007FF639B720C6

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: b7289756deaf2281126f785b6150de9230cf809aabd077c69b50a9b237b63b39
Instruction ID: 28c3a171e1c2f2349b890e7e8ce62ef5e0c399840a656335828d4e8aa7501379
Opcode Fuzzy Hash: b7289756deaf2281126f785b6150de9230cf809aabd077c69b50a9b237b63b39
Instruction Fuzzy Hash: DC014876619B8AC6CA189F66F48006AB371F748FC4B248036DB9E47729DF38D482C740

Function 00007FF639B74B20 Relevance: 1.6, APIs: 1, Instructions: 81fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B71BAC: free.MSVCRT ref: 00007FF639B71BC2

CreateFileA.KERNELBASE ref: 00007FF639B74C27

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CreateFilefree
String ID:
API String ID: 1298414175-0
Opcode ID: 967cc07b0d1bba1ad99a6294e64c340a394ccec1fcd66ac749ac13115b54e733
Instruction ID: 0b10bba4e11354585861b0b326f99e0cdef34e1d1e6706efa02cd801a4259669
Opcode Fuzzy Hash: 967cc07b0d1bba1ad99a6294e64c340a394ccec1fcd66ac749ac13115b54e733
Instruction Fuzzy Hash: BC31BD73A14B4487D710CF24E54439D73A4F789BA9F208225DB6D87B94DF78D8A4CB40

Function 00007FF639B76230 Relevance: 1.5, APIs: 1, Instructions: 17networkCOMMON

Download Yara Rule

APIs

send.WS2_32 ref: 00007FF639B76249

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: 3de1ff520bc11ac6883d350d74be1a90305dc12661e06926623bad6a559e0201
Instruction ID: 47051984962fa3e0f6c2843cba6945d7ab2e872a78b1552d8f93c3fc7a829833
Opcode Fuzzy Hash: 3de1ff520bc11ac6883d350d74be1a90305dc12661e06926623bad6a559e0201
Instruction Fuzzy Hash: 79D02E10E1890BC1EFB4AFF1A0904361298AF9F7B8F001330CA3F897C1DF2890826A02

Function 00007FF639B7603C Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

closesocket.WS2_32 ref: 00007FF639B76049

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: closesocket
String ID:
API String ID: 2781271927-0
Opcode ID: 64c90f885a31d48d57d6b25ffc1b1352abae0e759f8bbbde2d0c86ebcd09df8c
Instruction ID: f191e1d2db5dcfa17cd957d4164e5cd7b942221659117bb1d3ca456d257814be
Opcode Fuzzy Hash: 64c90f885a31d48d57d6b25ffc1b1352abae0e759f8bbbde2d0c86ebcd09df8c
Instruction Fuzzy Hash: 7EC08C62A24949C2EB586B62A8850282224EB5CF30B582320CE7A8D2E19F14C1E28700

Function 00007FF639B74D7C Relevance: 1.5, APIs: 1, Instructions: 8fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE ref: 00007FF639B74D8F

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: d5a4c1bd308a5df499a1d71afb31962f28aa0264ff091325faeae8dc997d8657
Instruction ID: 036d0b9fdfcc37e1a7f7466ac5b9bb9c57b41b4a5b112221e5d0d582ace1319a
Opcode Fuzzy Hash: d5a4c1bd308a5df499a1d71afb31962f28aa0264ff091325faeae8dc997d8657
Instruction Fuzzy Hash: 74C00266A199C9C3D610EF14E84575AA370F799708FA00111EB8E86725CF3DDE5ACF05

Function 00007FF639B75DA0 Relevance: 1.4, APIs: 1, Instructions: 101COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF639B75E1F

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 47b68d978419b3d1d0bf07cdc05175ec34861cb67b8432b19bd7770028bf244d
Instruction ID: 3f17c45d47b4af909f570a9b490ab2e168601fb032f764ab4405d7883bb55d07
Opcode Fuzzy Hash: 47b68d978419b3d1d0bf07cdc05175ec34861cb67b8432b19bd7770028bf244d
Instruction Fuzzy Hash: 09414472B10B859BE704CF65D8406AD73A1F748BA8F044229DF2D63B88EB74E565D740

Function 00007FF639B7541C Relevance: 1.3, APIs: 1, Instructions: 64COMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,00007FF639B818E0), ref: 00007FF639B754CA

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 5f489463252743d5f33400c16c58bccaa1b73653c4a671fa15be28a9c505617a
Instruction ID: 73add28bf9faf7318dfd3a995493b5e7be2be66db7f72970c5dce9fad4fa5006
Opcode Fuzzy Hash: 5f489463252743d5f33400c16c58bccaa1b73653c4a671fa15be28a9c505617a
Instruction Fuzzy Hash: 3921A972B1D64A82EBA08F25D44067E23A6FF45BD9F248339DE1E8739CCE78D440A701

Function 00007FF639B71D28 Relevance: 1.3, APIs: 1, Instructions: 41COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF639B71D92

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 1400a4375b15c7b6be5c1a2fa7b3db035b68f5a1f72ed520b6b47053a515f4ab
Instruction ID: 40e28f58690102486a8b99c477b2e18f77c9efa5b9d3fa149c7e0c4183bd7606
Opcode Fuzzy Hash: 1400a4375b15c7b6be5c1a2fa7b3db035b68f5a1f72ed520b6b47053a515f4ab
Instruction Fuzzy Hash: 11016122718AC585DB148F16E5402AAB721EB86BE8F584331EBAE47B99CF3CD141C740

Function 00007FF639B71FF4 Relevance: 1.3, APIs: 1, Instructions: 37COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF639B72052

Part of subcall function 00007FF639B72074: malloc.MSVCRT ref: 00007FF639B720A6
Part of subcall function 00007FF639B72074: free.MSVCRT ref: 00007FF639B720C6

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: freemallocmemset
String ID:
API String ID: 3809226132-0
Opcode ID: a840bc7aaf571b9cae7747feef645975e989ff6794cab3c7b45526e37f9bf6a6
Instruction ID: f0199400f73f4cc822cc52ef3615abd4ff3bb225917cea11fbf66070d602dff6
Opcode Fuzzy Hash: a840bc7aaf571b9cae7747feef645975e989ff6794cab3c7b45526e37f9bf6a6
Instruction Fuzzy Hash: 6101A2A2708BC482DF04CFAAE14406DA322EB49FC47048135DF9D4B71DCE38C191C740

Function 00007FF639B74EE8 Relevance: 1.3, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B74B20: CreateFileA.KERNELBASE ref: 00007FF639B74C27

CloseHandle.KERNELBASE ref: 00007FF639B74F49

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CloseCreateFileHandle
String ID:
API String ID: 3498533004-0
Opcode ID: 9f45e04212de54cf2a94c7a1aa0cd980597b2fb5a3e44d3ccd437fe9ce84d955
Instruction ID: 81b80be7ec933a842da549f412664bb7d0ce47a5c3a0ab88accaee1e34ef819d
Opcode Fuzzy Hash: 9f45e04212de54cf2a94c7a1aa0cd980597b2fb5a3e44d3ccd437fe9ce84d955
Instruction Fuzzy Hash: 89016D22619FCA81DB00DB64E4443AEB362EB86B74F400325D6BD827F5EF78C589CB00

Function 00007FF639B71ED0 Relevance: 1.3, APIs: 1, Instructions: 26COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF639B71F12

Part of subcall function 00007FF639B71BAC: free.MSVCRT ref: 00007FF639B71BC2

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 5f7ed36a1e4d0079af8b67e5f1414300025ba24bd381152af37cc2b6fd1143ac
Instruction ID: fc2a09d363d27a23766ceafc3e448a750d1aaf3cfae2367dafb6b8ef645828c6
Opcode Fuzzy Hash: 5f7ed36a1e4d0079af8b67e5f1414300025ba24bd381152af37cc2b6fd1143ac
Instruction Fuzzy Hash: E1F05E21A48A8582EA104F06F44006AA326FB8AFB4B280731EFA907BD5CF39D0528B10

Function 00007FF639B76E8C Relevance: 1.3, APIs: 1, Instructions: 26COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B7C9F4: free.MSVCRT ref: 00007FF639B7CA41

free.MSVCRT ref: 00007FF639B76ED2

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 8ca048768c4de5b1461598578d39b50963595d1204a609cf1b760563c82d2b23
Instruction ID: fc0fa54126687a52cba8de2f00f4e00d6d9ed529e4285ff766dd0dbc985a7a27
Opcode Fuzzy Hash: 8ca048768c4de5b1461598578d39b50963595d1204a609cf1b760563c82d2b23
Instruction Fuzzy Hash: FFF08966A16689C1EA00EF25C44947E63619FC6F74F244335DA7E533F1DE38D886CB01

Function 00007FF639B7C9F4 Relevance: 1.3, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF639B7CA41

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: c7bef888a7c1d1ceef3cae74e8f9250cb1b6c5f686ede0b0dac61642ad62a27a
Instruction ID: 31741786ffc313b09fac2ba6306f4d8d6a65cf1e236b3deee346f741c4eed546
Opcode Fuzzy Hash: c7bef888a7c1d1ceef3cae74e8f9250cb1b6c5f686ede0b0dac61642ad62a27a
Instruction Fuzzy Hash: 0EF082A2524A8AC2CB209F29E00046B6721FF8AFF5B001325EEAE577D9CF3CC104CA00

Function 00007FF639B71CD4 Relevance: 1.3, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF639B71D10

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: cc54afcfa86a0e98bdcfccdc3784b9090a28be23aa4527b145c0e61bc4e052e8
Instruction ID: f532a2efaf5ac4375a8bde8d37f59bb9da7108085fc93283ff7de1040c00abd7
Opcode Fuzzy Hash: cc54afcfa86a0e98bdcfccdc3784b9090a28be23aa4527b145c0e61bc4e052e8
Instruction Fuzzy Hash: 98E0A051E086C940EA004E53B54015BA611AB4AFF0E08A330EFBE4BBC9CE3CD0918B00

Function 00007FF639B758BC Relevance: 1.3, APIs: 1, Instructions: 18COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF639B758E3

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 3359a68eec4475fca628123eab981bd4f2c99cb6b6e6948749857cb2f8952175
Instruction ID: 5f609a0409c2ca26390352adddcfece859a69eee494d10a18d76aac39db7d2a3
Opcode Fuzzy Hash: 3359a68eec4475fca628123eab981bd4f2c99cb6b6e6948749857cb2f8952175
Instruction Fuzzy Hash: 06D0CD1070878582D6205B15B504136A361BF47BF0F640330DABD477E6CF7DC4415A01

Function 00007FF639B71BAC Relevance: 1.3, APIs: 1, Instructions: 8COMMONLIBRARYCODE

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF639B71BC2

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 94e73ce95805a66b71ef28f659bf7d04456f3945975dd2b7a1630861a4a6831a
Instruction ID: e9e9584933c9a9e5460eeba4dd0ba64bdbd9be1a375c50ea00fd67103d45d24d
Opcode Fuzzy Hash: 94e73ce95805a66b71ef28f659bf7d04456f3945975dd2b7a1630861a4a6831a
Instruction Fuzzy Hash: E4C00222918ACAC1C620AF64E8490196720F796775FA08364DABE556F4CF29C55BCB00

Non-executed Functions

Function 00007FF639B7793C Relevance: 19.8, APIs: 4, Strings: 9, Instructions: 333COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

Part of subcall function 00007FF639B78ECC: CryptHashData.ADVAPI32 ref: 00007FF639B78F19
Part of subcall function 00007FF639B78ECC: CryptDestroyHash.ADVAPI32 ref: 00007FF639B78F3E

free.MSVCRT ref: 00007FF639B77D8A
free.MSVCRT ref: 00007FF639B77D95
free.MSVCRT ref: 00007FF639B77DAC
free.MSVCRT ref: 00007FF639B77DB7

Strings

circuit::rendezvous_introduce() [or: %s, state: introducing], xrefs: 00007FF639B779CB
circuit::rendezvous_introduce() [or: %s, state: completed], xrefs: 00007FF639B77E19
circuit::rendezvous_introduce() [or: %s, is_rendezvous_introduced() == false], xrefs: 00007FF639B77E3E
circuit::rendezvous_introduce() [or: %s, state: introduced], xrefs: 00007FF639B77DE1
circuit::rendezvous_introduce() [or: %s, state: completing], xrefs: 00007FF639B779EC
circuit::rendezvous_introduce() [or: %s, is_rendezvous_completed() == false], xrefs: 00007FF639B77E2B
circuit::rendezvous_introduce() rendezvous circuit extend node isn't null, xrefs: 00007FF639B77A92
introduction_point is null [circuit: %X], xrefs: 00007FF639B77E58
introducee is null [circuit: %X], xrefs: 00007FF639B77E4B

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$CryptHash$CurrentDataDestroyLocalThreadTime_cwprintf_s_l
String ID: circuit::rendezvous_introduce() [or: %s, is_rendezvous_completed() == false]$circuit::rendezvous_introduce() [or: %s, is_rendezvous_introduced() == false]$circuit::rendezvous_introduce() [or: %s, state: completed]$circuit::rendezvous_introduce() [or: %s, state: completing]$circuit::rendezvous_introduce() [or: %s, state: introduced]$circuit::rendezvous_introduce() [or: %s, state: introducing]$circuit::rendezvous_introduce() rendezvous circuit extend node isn't null$introducee is null [circuit: %X]$introduction_point is null [circuit: %X]
API String ID: 3705592166-1875301337
Opcode ID: bb783c5025a5b5438a14aa8c5b8b3d9ca98b861e4f394cd7254ed03a57fecbe3
Instruction ID: fbfff01487b5ace37e774678cbead2606e34e4cbba9cbae10e045a4d1306c8e9
Opcode Fuzzy Hash: bb783c5025a5b5438a14aa8c5b8b3d9ca98b861e4f394cd7254ed03a57fecbe3
Instruction Fuzzy Hash: 20F1D962A18B8986DB00DF68E4801EEB371FB86794F504235EB9E53798DF3CD545DB40

Function 00007FF639B7E958 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 143COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF639B7E9CF
memmove.MSVCRT ref: 00007FF639B7EA95
memmove.MSVCRT ref: 00007FF639B7EACD
memmove.MSVCRT ref: 00007FF639B7EB08
BCryptImportKeyPair.BCRYPT ref: 00007FF639B7EB3C
BCryptExportKey.BCRYPT ref: 00007FF639B7EB6E

Strings

DHPV, xrefs: 00007FF639B7E9AF
DHPRIVATEBLOB, xrefs: 00007FF639B7EB2C, 00007FF639B7EB62

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memmove$Crypt$ExportImportPairmemset
String ID: DHPRIVATEBLOB$DHPV
API String ID: 2581258595-3323250641
Opcode ID: f80fd9cabac184f76c0a6aa1a9b40fe8b7bcfee4bba84a21a0249219f670dcda
Instruction ID: 286c88a760550b3b83ea152243b52b1ae95f5c2f955c88a18ca393bb2c99fbb8
Opcode Fuzzy Hash: f80fd9cabac184f76c0a6aa1a9b40fe8b7bcfee4bba84a21a0249219f670dcda
Instruction Fuzzy Hash: D151A622A28BC886DB11CF29D5043E97360FB99B88F459331DF9D16322EF39E295C700

Function 00007FF639B7E744 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 132COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF639B7E7BD
memmove.MSVCRT ref: 00007FF639B7E87C
memmove.MSVCRT ref: 00007FF639B7E8B4
memmove.MSVCRT ref: 00007FF639B7E8EF
BCryptImportKeyPair.BCRYPT ref: 00007FF639B7E923

Strings

DHPUBLICBLOB, xrefs: 00007FF639B7E913
DHPB, xrefs: 00007FF639B7E79D

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memmove$CryptImportPairmemset
String ID: DHPB$DHPUBLICBLOB
API String ID: 1384487252-1103359662
Opcode ID: ba63a1e9017199b943767076d9444dabd0a7cd781767b20f0d192410dcd481e4
Instruction ID: 9ce11e68cfb538de97ecebf7ed53cde6ac06ea6a9a49214999ebcc11e5e48df0
Opcode Fuzzy Hash: ba63a1e9017199b943767076d9444dabd0a7cd781767b20f0d192410dcd481e4
Instruction Fuzzy Hash: 3D518122A28BC992DB05CF28D5017E97360FB9AB88F559321DF9D16312EF39E2D5C700

Function 00007FF639B7D990 Relevance: 12.2, APIs: 8, Instructions: 174encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,00000000,?,00000001,00007FF639B825A8), ref: 00007FF639B7DA27
CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,00000000,?,00000001,00007FF639B825A8), ref: 00007FF639B7DAFE
CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,00000000,?,00000001,00007FF639B825A8), ref: 00007FF639B7DB74

Part of subcall function 00007FF639B7DD8C: CryptDecodeObject.CRYPT32 ref: 00007FF639B7DE15
Part of subcall function 00007FF639B7DD8C: CryptImportKey.ADVAPI32 ref: 00007FF639B7DE44

Part of subcall function 00007FF639B7DE60: memmove.MSVCRT ref: 00007FF639B7DEBE
Part of subcall function 00007FF639B7DE60: CryptEncrypt.ADVAPI32 ref: 00007FF639B7DEF5

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: Crypt$Destroy$DecodeEncryptImportObjectmemmove
String ID:
API String ID: 1580205057-0
Opcode ID: 8ff654942294a6c69da5d7906d9c7ea83ac2637bdd9009e5c2abd942d976b969
Instruction ID: 70140502f5f5bb618b7c386e14e2abad05174f3043927616801b981df867d5bc
Opcode Fuzzy Hash: 8ff654942294a6c69da5d7906d9c7ea83ac2637bdd9009e5c2abd942d976b969
Instruction Fuzzy Hash: 29911E33A29B85C6E7408F64E4806AEB371FB89B94F105225EF8E57B18DF78D594CB40

Function 00007FF639B79C84 Relevance: 10.7, APIs: 7, Instructions: 178encryptionCOMMON

Download Yara Rule

APIs

CryptHashData.ADVAPI32 ref: 00007FF639B79DE3
CryptDuplicateHash.ADVAPI32 ref: 00007FF639B79DFE
CryptDestroyHash.ADVAPI32 ref: 00007FF639B79E24
free.MSVCRT ref: 00007FF639B79E3F
memmove.MSVCRT ref: 00007FF639B79E8D
free.MSVCRT ref: 00007FF639B79EEA
free.MSVCRT ref: 00007FF639B79EF5

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptHashfree$DataDestroyDuplicatememmove
String ID:
API String ID: 2859014979-0
Opcode ID: 72e6eb8ddbe3ad292cbaa642e28bd9d09380eb957dd268a61e83118deb2dcac6
Instruction ID: 74ed308f7787b3bd7bb6ca24c2e3a83f3a002f332aeefefabc1197c5ad1dae8a
Opcode Fuzzy Hash: 72e6eb8ddbe3ad292cbaa642e28bd9d09380eb957dd268a61e83118deb2dcac6
Instruction Fuzzy Hash: 79815976B09B458AEB00DFA5D4401ED3376FB49B98B404276DF1EA7B98DE38E50AC341

Function 00007FF639B858AC Relevance: 10.5, APIs: 7, Instructions: 47COMMON

Download Yara Rule

APIs

BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF639B858C4
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF639B858D8
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF639B858EC
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF639B85900
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF639B85914
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF639B85928
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF639B85944

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: AlgorithmCloseCryptProvider
String ID:
API String ID: 3378198380-0
Opcode ID: 0465b0cbe872db1f1d628d5d248310a51d8e777f285f354e42eb045fc691be28
Instruction ID: d58b83817e6e415aa44fba766a8f0a10bbede8c26baf7593735d06e3e5af3eab
Opcode Fuzzy Hash: 0465b0cbe872db1f1d628d5d248310a51d8e777f285f354e42eb045fc691be28
Instruction Fuzzy Hash: 77119C19F1E68F91FE9C9F62AC981371353AFDAB55F088871C80F82754CE2CE405BA02

Function 00007FF639B7E57C Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 84COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B7E744: memset.MSVCRT ref: 00007FF639B7E7BD
Part of subcall function 00007FF639B7E744: memmove.MSVCRT ref: 00007FF639B7E87C
Part of subcall function 00007FF639B7E744: memmove.MSVCRT ref: 00007FF639B7E8B4

BCryptSecretAgreement.BCRYPT ref: 00007FF639B7E617
BCryptDeriveKey.BCRYPT ref: 00007FF639B7E66B
BCryptDestroySecret.BCRYPT ref: 00007FF639B7E678
BCryptDestroyKey.BCRYPT ref: 00007FF639B7E6CC

Strings

TRUNCATE, xrefs: 00007FF639B7E65D

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: Crypt$DestroySecretmemmove$AgreementDerivememset
String ID: TRUNCATE
API String ID: 3314240396-2602342604
Opcode ID: 65d5ba46f674aa20e22a304678ab28c191fd29356ca0cd563123eeaec7f3c646
Instruction ID: 703937f7043e0b5e640961d57971856d529ef5e2015ca41ac17f87e6a17870ef
Opcode Fuzzy Hash: 65d5ba46f674aa20e22a304678ab28c191fd29356ca0cd563123eeaec7f3c646
Instruction Fuzzy Hash: C2413072918BC5CAD7108F64E8443AAB760FB89768F144325DBAD57B98DF78D148CB40

Function 00007FF639B79678 Relevance: 7.6, APIs: 5, Instructions: 53encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyHash.ADVAPI32 ref: 00007FF639B796AF
CryptDestroyHash.ADVAPI32 ref: 00007FF639B796CA
CryptDestroyKey.ADVAPI32 ref: 00007FF639B796FA
CryptDestroyKey.ADVAPI32 ref: 00007FF639B7971C
free.MSVCRT ref: 00007FF639B7972B

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroy$Hash$free
String ID:
API String ID: 3361909387-0
Opcode ID: 8056463906fa680d0ede20bf7d5d200b464088edbe34db24ed6d9707660fef05
Instruction ID: 6384d28fe1eba374588b22f345876d4b577cc863f0574b5ec08beaa93dbf14d1
Opcode Fuzzy Hash: 8056463906fa680d0ede20bf7d5d200b464088edbe34db24ed6d9707660fef05
Instruction Fuzzy Hash: AC218132609B89C1EB049F51E45036A7360FF4AB74F188334CA5E86698CF7CD455DB11

Function 00007FF639B71720 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 41threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
_cwprintf_s_l.LIBCMT ref: 00007FF639B71791

Part of subcall function 00007FF639B71670: EnterCriticalSection.KERNEL32 ref: 00007FF639B716A4
Part of subcall function 00007FF639B71670: GetStdHandle.KERNEL32 ref: 00007FF639B716B0
Part of subcall function 00007FF639B71670: GetConsoleScreenBufferInfo.KERNEL32 ref: 00007FF639B716BE
Part of subcall function 00007FF639B71670: GetStdHandle.KERNEL32 ref: 00007FF639B716C9
Part of subcall function 00007FF639B71670: SetConsoleTextAttribute.KERNEL32 ref: 00007FF639B716D5
Part of subcall function 00007FF639B71670: vprintf.MSVCRT ref: 00007FF639B716E1
Part of subcall function 00007FF639B71670: GetStdHandle.KERNEL32 ref: 00007FF639B716EC
Part of subcall function 00007FF639B71670: SetConsoleTextAttribute.KERNEL32 ref: 00007FF639B716FA

Strings

[%X]: [%02u:%02u:%02u.%03u] , xrefs: 00007FF639B71768

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: ConsoleHandle$AttributeText$BufferCriticalCurrentEnterInfoLocalScreenSectionThreadTime_cwprintf_s_lvprintf
String ID: [%X]: [%02u:%02u:%02u.%03u]
API String ID: 819107525-676204660
Opcode ID: 6bb37b10fe762c97f0158456fdc17b584a60dfeebe70f0aab0f80ccda6ad73be
Instruction ID: 2417bc8d2a5a95b21a5a53a1f1ebea0a414e63c35d966e7031a1f164ed265f50
Opcode Fuzzy Hash: 6bb37b10fe762c97f0158456fdc17b584a60dfeebe70f0aab0f80ccda6ad73be
Instruction Fuzzy Hash: 2E01C072A1826AD6E3146F05A4408BA7B72FB4AF92F100135EF8A43744DF3CD196DB20

Function 00007FF639B79FFC Relevance: 4.6, APIs: 3, Instructions: 79encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF639B7A070
memmove.MSVCRT ref: 00007FF639B7A09A
CryptEncrypt.ADVAPI32 ref: 00007FF639B7A0D0

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memmove$CryptEncrypt
String ID:
API String ID: 1967202165-0
Opcode ID: a6a87dd234729f1385e36205193c2a95f46cc2f53ef43175cd9dca33a655bcbb
Instruction ID: b34c3aab9ee2cc3458f3be7fa8f7a4e09655be41fefbb5fd6f2c22bcf828a2c7
Opcode Fuzzy Hash: a6a87dd234729f1385e36205193c2a95f46cc2f53ef43175cd9dca33a655bcbb
Instruction Fuzzy Hash: A631D272718B8596EB548F25D400699B761FB89FA0F148331DBAE83B85DF79E096C700

Function 00007FF639B7F5FC Relevance: 4.5, APIs: 3, Instructions: 26encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyHash.ADVAPI32 ref: 00007FF639B7F61A
CryptDestroyKey.ADVAPI32 ref: 00007FF639B7F62E
CryptDestroyHash.ADVAPI32 ref: 00007FF639B7F642

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroy$Hash
String ID:
API String ID: 101140002-0
Opcode ID: ef8b6fbfc8bbf2e2b354e145fbe04cc6ddd9346662448e14135da8c03d5d6951
Instruction ID: 2f1da0f006de8b81d926e205d76ab7c1fcfc780164d960bd91010788eac8b434
Opcode Fuzzy Hash: ef8b6fbfc8bbf2e2b354e145fbe04cc6ddd9346662448e14135da8c03d5d6951
Instruction Fuzzy Hash: 67F0542691AA4AC1EB149F60D4543396360EF4AF35F248334CA7F492D8CF3CD445DB06

Function 00007FF639B72B6C Relevance: 3.9, APIs: 3, Instructions: 108COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF639B72C28
memmove.MSVCRT ref: 00007FF639B72C5A
memmove.MSVCRT ref: 00007FF639B72CB7

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 33719eb6c8dc86d3924c3e43f827edf63d0ade2311fb9d0d6dd2d26755ec0791
Instruction ID: 5f049bd70a8873ef3ba9f42dd9885db68c83987260f7c5b2e1f40ac50662e497
Opcode Fuzzy Hash: 33719eb6c8dc86d3924c3e43f827edf63d0ade2311fb9d0d6dd2d26755ec0791
Instruction Fuzzy Hash: 62313763B0459987FA10CE39D4043EA7762EB957D4F459232DE8E87799CF38D08ACB00

Function 00007FF639B7E064 Relevance: 3.2, APIs: 2, Instructions: 152COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B72968: BCryptGenRandom.BCRYPT ref: 00007FF639B729AD

Part of subcall function 00007FF639B7E958: memset.MSVCRT ref: 00007FF639B7E9CF
Part of subcall function 00007FF639B7E958: memmove.MSVCRT ref: 00007FF639B7EA95
Part of subcall function 00007FF639B7E958: memmove.MSVCRT ref: 00007FF639B7EACD

free.MSVCRT ref: 00007FF639B7E130
BCryptDestroyKey.BCRYPT ref: 00007FF639B7E2A6

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: Cryptmemmove$DestroyRandomfreememset
String ID:
API String ID: 1712627480-0
Opcode ID: 41e7c5d62a2f75043f1a72863192889098d19b6f68372fa347add784069b7aa7
Instruction ID: bc95bf3e25981aa2d86eadd3b1e0359b56caa3f1bf01133512ae989a6992c4bb
Opcode Fuzzy Hash: 41e7c5d62a2f75043f1a72863192889098d19b6f68372fa347add784069b7aa7
Instruction Fuzzy Hash: 0B81F663D18FC982E7118F28D5012A97764FBA9B88F15A325DF8D12726EF78E2D5C700

Function 00007FF639B7DE60 Relevance: 3.1, APIs: 2, Instructions: 64encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF639B7DEBE
CryptEncrypt.ADVAPI32 ref: 00007FF639B7DEF5

Part of subcall function 00007FF639B72428: memset.MSVCRT ref: 00007FF639B72486

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptEncryptmemmovememset
String ID:
API String ID: 3182014635-0
Opcode ID: 971e16deb4ee08aef31a8e55856ecf044dbc3dee2fbb6bd1652167bfafa372b0
Instruction ID: 7c597ab64d352dddb75f03e37e6b79ae54b118a613f605efedb2d3e194b7d530
Opcode Fuzzy Hash: 971e16deb4ee08aef31a8e55856ecf044dbc3dee2fbb6bd1652167bfafa372b0
Instruction Fuzzy Hash: FF217873618BC586E7108F29E04029EBBA1F789B94F148221DBA947BA8CF38D545CB40

Function 00007FF639B7DD8C Relevance: 3.0, APIs: 2, Instructions: 49encryptionCOMMON

Download Yara Rule

APIs

CryptDecodeObject.CRYPT32 ref: 00007FF639B7DE15
CryptImportKey.ADVAPI32 ref: 00007FF639B7DE44

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: Crypt$DecodeImportObject
String ID:
API String ID: 150989800-0
Opcode ID: 6ebd85b9946b772346055a6e7910b221a464f48a22cda7b7d755afcd3d8fb766
Instruction ID: f85ac52dd96663aa7a4256b95e460c4d9d5d77a3d2a8dc13ae373eee9f8f4c9f
Opcode Fuzzy Hash: 6ebd85b9946b772346055a6e7910b221a464f48a22cda7b7d755afcd3d8fb766
Instruction Fuzzy Hash: 58216A32A18B85C2E7108F28F84895977A4F759BD4F204235CBAD53BA4DF3AD596CB00

Function 00007FF639B724A8 Relevance: 3.0, APIs: 2, Instructions: 48encryptionCOMMON

Download Yara Rule

APIs

CryptStringToBinaryA.CRYPT32 ref: 00007FF639B72507

Part of subcall function 00007FF639B72428: memset.MSVCRT ref: 00007FF639B72486

CryptStringToBinaryA.CRYPT32 ref: 00007FF639B7255C

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: BinaryCryptString$memset
String ID:
API String ID: 1505698593-0
Opcode ID: 930927c38a347c7a54872c9f0a21b98dcb8ca507b8132dee6682c52f1c8053f2
Instruction ID: b32bc58ef59d946e65012cf70a01920c3c6d987a0d7dbbe214dbfa30c63ae98a
Opcode Fuzzy Hash: 930927c38a347c7a54872c9f0a21b98dcb8ca507b8132dee6682c52f1c8053f2
Instruction Fuzzy Hash: DB211877624B8886D700CF29E18836D77A5F398FA8F204315DB99477A8CF78D549CB81

Function 00007FF639B7237C Relevance: 3.0, APIs: 2, Instructions: 44encryptionCOMMON

Download Yara Rule

APIs

CryptBinaryToStringA.CRYPT32 ref: 00007FF639B723D1
CryptBinaryToStringA.CRYPT32 ref: 00007FF639B72413

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: BinaryCryptString
String ID:
API String ID: 80407269-0
Opcode ID: 1d07f80b9ecbefa7be47259fd9aa380f43fee97850845643df9dbf756d3d2ba1
Instruction ID: e0e3c486b4d3d7cdee8d9164c183d87e3816cd0067a18c4470d71a061f467613
Opcode Fuzzy Hash: 1d07f80b9ecbefa7be47259fd9aa380f43fee97850845643df9dbf756d3d2ba1
Instruction Fuzzy Hash: 71113A72314B84C6DB00CF29E484A1DB3A5F788FE8B208235DAAD87758DF79D855CB40

Function 00007FF639B78ECC Relevance: 3.0, APIs: 2, Instructions: 35encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B793B0: CryptCreateHash.ADVAPI32 ref: 00007FF639B793D4

CryptHashData.ADVAPI32 ref: 00007FF639B78F19

Part of subcall function 00007FF639B79410: CryptGetHashParam.ADVAPI32 ref: 00007FF639B79465

CryptDestroyHash.ADVAPI32 ref: 00007FF639B78F3E

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptHash$CreateDataDestroyParam
String ID:
API String ID: 1275266669-0
Opcode ID: 1bca8e9c028896966ab3be2343b35c14afa98911a6fef791bfba991f22339d8b
Instruction ID: b651f168605465bfa0e314fba52c131508f60f5c0764601cde5ef869cce93392
Opcode Fuzzy Hash: 1bca8e9c028896966ab3be2343b35c14afa98911a6fef791bfba991f22339d8b
Instruction Fuzzy Hash: 9201D422628A4581DB109F24E54576AA331EFC6FE4F204321DB6D4B7E9DF3CD084CB40

Function 00007FF639B7E350 Relevance: 3.0, APIs: 2, Instructions: 30COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF639B7E38C
free.MSVCRT ref: 00007FF639B7E3A1

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: 03cbf5328df8db582ff1a3335e8780376dd63e0e967770bfb5b643eea4b2eeb3
Instruction ID: dab9e028e029a45708243c19762d5b006b92b1cee4292f61ce021c6512a275eb
Opcode Fuzzy Hash: 03cbf5328df8db582ff1a3335e8780376dd63e0e967770bfb5b643eea4b2eeb3
Instruction Fuzzy Hash: E3F03C36604B89C1EB189F05E544369B3A0FB8ABA0F598334CB7E577A0CF38E4A5C740

Function 00007FF639B7A388 Relevance: 3.0, APIs: 2, Instructions: 25encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF639B7A3B8
free.MSVCRT ref: 00007FF639B7A3CD

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: f0243ebd55accf259fa96741c12a1c57e3a5d836a8fc57fdd6047166d536146c
Instruction ID: 00999e5fba0d54c202ea445358600416a9d6392e6dd7791d729424f10ef60309
Opcode Fuzzy Hash: f0243ebd55accf259fa96741c12a1c57e3a5d836a8fc57fdd6047166d536146c
Instruction Fuzzy Hash: 4AF05431508B8AC5EB149F14E4443266361FF4AB74F284330CA6E463E4CF3DD445D701

Function 00007FF639B7E6E8 Relevance: 3.0, APIs: 2, Instructions: 25COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF639B7E718
free.MSVCRT ref: 00007FF639B7E72D

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: 85595cf61f34548e8f684ab0bfc8d2dead5f1af3a738ce37d66d7dff51bc60d2
Instruction ID: 10af4d36b5e4ebf74be68245b2ce0496f6889bfd82ca61de1818df21005b7b1b
Opcode Fuzzy Hash: 85595cf61f34548e8f684ab0bfc8d2dead5f1af3a738ce37d66d7dff51bc60d2
Instruction Fuzzy Hash: B2F05431609B8A85DB149F14E4443666360EF4AB74F684330CA6E463F4DF3CD045CA01

Function 00007FF639B7265C Relevance: 3.0, APIs: 2, Instructions: 24COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF639B72688
free.MSVCRT ref: 00007FF639B7269D

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: 089fdbaed0c4cde502a55d9f1622715043e3a179d3634e617963da521d597055
Instruction ID: e953e750e88a6e26b9aef091122ca3bd736fdb9be9802b25afb5683c280bfb5b
Opcode Fuzzy Hash: 089fdbaed0c4cde502a55d9f1622715043e3a179d3634e617963da521d597055
Instruction Fuzzy Hash: 53F08231608B8A81EB148F14E8043266320FF8AB74F184330CABE463E4CF3CC441CA00

Function 00007FF639B76840 Relevance: 3.0, APIs: 2, Instructions: 24encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF639B7686C
free.MSVCRT ref: 00007FF639B76881

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: b6be5cfa3d2a15447cfd7d394689d36114c6a2b72c25382cacace25a82540136
Instruction ID: f70288829d2c4f56d1a643da2e1082db3838d5255acfce409603fc5b0f502564
Opcode Fuzzy Hash: b6be5cfa3d2a15447cfd7d394689d36114c6a2b72c25382cacace25a82540136
Instruction Fuzzy Hash: 52F08231618B8AC1EB145F14E8003266320FF8AB74F584330CA7E463E4CF3CC4459701

Function 00007FF639B85868 Relevance: 3.0, APIs: 2, Instructions: 15encryptionCOMMON

Download Yara Rule

APIs

CryptReleaseContext.ADVAPI32 ref: 00007FF639B8587A
CryptReleaseContext.ADVAPI32 ref: 00007FF639B85896

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: ContextCryptRelease
String ID:
API String ID: 829835001-0
Opcode ID: ceddeda5f20c7a07b151f35b9b89575079074ba05a1e96cc27d4eb55530132b5
Instruction ID: 6d0a7120d623417880165c9b93719ff46563e65f77a9f74ae2e826f7773dd011
Opcode Fuzzy Hash: ceddeda5f20c7a07b151f35b9b89575079074ba05a1e96cc27d4eb55530132b5
Instruction Fuzzy Hash: 3AE09A18E2E68A81FB4D9F11AC953331292EFAAB41F444536C40F8A258CE6D6059BE06

Function 00007FF639B7DC84 Relevance: 1.6, APIs: 1, Instructions: 65encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B79F60: memset.MSVCRT ref: 00007FF639B79F7A

Part of subcall function 00007FF639B79FFC: memmove.MSVCRT ref: 00007FF639B7A070
Part of subcall function 00007FF639B79FFC: memmove.MSVCRT ref: 00007FF639B7A09A
Part of subcall function 00007FF639B79FFC: CryptEncrypt.ADVAPI32 ref: 00007FF639B7A0D0

CryptDestroyKey.ADVAPI32 ref: 00007FF639B7DD63

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: Cryptmemmove$DestroyEncryptmemset
String ID:
API String ID: 3702594739-0
Opcode ID: 1d7d4965c67dfa8812aaecac0dbf32a07fe68e79c27944485885eec54583edc8
Instruction ID: f9ecbf80f0afc6910157154bb03f60e600d23f06f9465021b1c9df2fec1e0aa5
Opcode Fuzzy Hash: 1d7d4965c67dfa8812aaecac0dbf32a07fe68e79c27944485885eec54583edc8
Instruction Fuzzy Hash: EC31F132B15F489EE710CFA4E8402DD33BAE748798B004629DE5D63B98EF34956AC784

Function 00007FF639B73E20 Relevance: 1.6, APIs: 1, Instructions: 312COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF639B74292

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 425833dd28550f37b43de33b233a60c39ade5eb56868d89cd0ea3061af01e92a
Instruction ID: 54bf1fa6426fb76da0227fe24a7f102ff223d86313ce204cbd63de5178178cc6
Opcode Fuzzy Hash: 425833dd28550f37b43de33b233a60c39ade5eb56868d89cd0ea3061af01e92a
Instruction Fuzzy Hash: A0F15F23A14F98C7D764CF38D4421DDA369F7A9788F55A316DB8E12A6AEF34D290C700

Function 00007FF639B79410 Relevance: 1.5, APIs: 1, Instructions: 25encryptionCOMMON

Download Yara Rule

APIs

CryptGetHashParam.ADVAPI32 ref: 00007FF639B79465

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptHashParam
String ID:
API String ID: 1839025277-0
Opcode ID: a57c460a65b8b2d04570939543b8e79dbc883e6388696c1478f4a435a54de8a8
Instruction ID: c1af897eb38e6e5dc1c2a32a5f64c8c820e8c91c40c3c1cdda25b0a95a527d92
Opcode Fuzzy Hash: a57c460a65b8b2d04570939543b8e79dbc883e6388696c1478f4a435a54de8a8
Instruction Fuzzy Hash: 21F0677221478483E704CF16E1083AAB361F784BB4F104324DBA907BD8CBBCD4448B40

Function 00007FF639B72968 Relevance: 1.5, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

BCryptGenRandom.BCRYPT ref: 00007FF639B729AD

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptRandom
String ID:
API String ID: 2662593985-0
Opcode ID: 85098f2f455a1ad74efeb1fb5c359c4b9ef5c281bdb4f559abec954d7f6c00b0
Instruction ID: a9213d2f1deb861826580242332f62eb2f14b410532e9c26e1ef822742947621
Opcode Fuzzy Hash: 85098f2f455a1ad74efeb1fb5c359c4b9ef5c281bdb4f559abec954d7f6c00b0
Instruction Fuzzy Hash: 6AE06D7262478582E724CF25E41566BA322F785BB8F048735DEF90A7D8CF3CD0858B80

Function 00007FF639B72574 Relevance: 1.5, APIs: 1, Instructions: 19encryptionCOMMON

Download Yara Rule

APIs

CryptGenRandom.ADVAPI32 ref: 00007FF639B725B4

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptRandom
String ID:
API String ID: 2662593985-0
Opcode ID: 3f149b66201509bc817e725a0f7ec8cecd2c81adcb0e292f965ea22d79170c87
Instruction ID: 46e06e2e934bf3e28779a2fe687f81137623d36f3eaf6eff8470a7e40ebf1332
Opcode Fuzzy Hash: 3f149b66201509bc817e725a0f7ec8cecd2c81adcb0e292f965ea22d79170c87
Instruction Fuzzy Hash: 9EE06D6252878582DB248F25E80426AA322F786BF8F044734DDBA0A3D8CF3CD0548F00

Function 00007FF639B79F1C Relevance: 1.5, APIs: 1, Instructions: 18encryptionCOMMON

Download Yara Rule

APIs

CryptDuplicateHash.ADVAPI32 ref: 00007FF639B79F46

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDuplicateHash
String ID:
API String ID: 2532617884-0
Opcode ID: 05388456e86edcccc840f7eee5746a77dc32ac02c9debcf5c83c3629ac78943b
Instruction ID: d89f93eabbb1877afe9701d65ffa94cee50c67571420e69056271ec19c2c802a
Opcode Fuzzy Hash: 05388456e86edcccc840f7eee5746a77dc32ac02c9debcf5c83c3629ac78943b
Instruction Fuzzy Hash: 50E04FB2624A4483E7248F25E41472AB261F389BB9F148720EEB80A6E4CB7DC1598A04

Function 00007FF639B7E30C Relevance: 1.5, APIs: 1, Instructions: 17COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF639B7E33B

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 5db91b7dca1842615bb65c7de4c55091b3a37ab9f1a139e5bc8d0ecbd43fc096
Instruction ID: 6a78d3205aad08cf680fa9b6ca87dc2c98c03897bb60c5abf3d97690b89c84da
Opcode Fuzzy Hash: 5db91b7dca1842615bb65c7de4c55091b3a37ab9f1a139e5bc8d0ecbd43fc096
Instruction Fuzzy Hash: ACE09A36508B89C2DB008F10E444329B364FB4A734F284320CABE053E4DF3CC056CB20

Function 00007FF639B797B4 Relevance: 1.5, APIs: 1, Instructions: 17encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF639B797E2

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: a5739fd487ef02d905056ee8ac813dc2dcfbcd3bd3d228c55506f9e7fdcdef01
Instruction ID: 333bd395b100828c653d96207d7253c7d00e91a7828fdbce95cee0162709ffcd
Opcode Fuzzy Hash: a5739fd487ef02d905056ee8ac813dc2dcfbcd3bd3d228c55506f9e7fdcdef01
Instruction Fuzzy Hash: 0BE01A36919B8995DB109F50E444325B364FB49B35F244324DABE457E4DF3CC45ADB01

Function 00007FF639B79774 Relevance: 1.5, APIs: 1, Instructions: 17encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF639B797A2

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: f4a0e855f8132d60f2e02adc68ecd5023a4dfd383e5417e916832aa658541dc1
Instruction ID: ed74d7398e6cd00f898b9c358ed401e334e44f714417ea312f648221898bd6ee
Opcode Fuzzy Hash: f4a0e855f8132d60f2e02adc68ecd5023a4dfd383e5417e916832aa658541dc1
Instruction Fuzzy Hash: 42E09A32919B8991DB108F10E440325B320FB49B34F244320DABE453E4CF3CC456CB00

Function 00007FF639B7E2D0 Relevance: 1.5, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF639B7E2F9

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 616a0a8e820ab23e4b665b8850dca992a1a9197730fc5481c29b0cfb7d162c04
Instruction ID: 3607503b062541b129443daa30229d77915622e4fb737c2ec8bec24e74ac826b
Opcode Fuzzy Hash: 616a0a8e820ab23e4b665b8850dca992a1a9197730fc5481c29b0cfb7d162c04
Instruction Fuzzy Hash: C5E04F26515B89C1DB115F50E4443257324EB49B34F144324CABE453E0DF3CD0568700

Function 00007FF639B797F4 Relevance: 1.5, APIs: 1, Instructions: 16encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF639B7981D

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 8a48a77c71ad9a04383b8be78bc3c77d2db96f39441026cf796830f87910d41b
Instruction ID: 0a32a8b120f1b89d2681a75a7abd6c078d0d75b9a5a83c4e0b052cc570f479c0
Opcode Fuzzy Hash: 8a48a77c71ad9a04383b8be78bc3c77d2db96f39441026cf796830f87910d41b
Instruction Fuzzy Hash: B3E04F26915B8985DB105F10E4443256320EB49B75F184320C9BE453E4DF3CC4569701

Function 00007FF639B72600 Relevance: 1.5, APIs: 1, Instructions: 15COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF639B72625

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 6d38ba3e7e9cdb38ad0192845ee3499e73be5f42258c5a8745c7a72746f69d8d
Instruction ID: 5ae30225b38ce47daef6163a3d61cc7fa41ba75f0e439695e9fc1723a6ee6240
Opcode Fuzzy Hash: 6d38ba3e7e9cdb38ad0192845ee3499e73be5f42258c5a8745c7a72746f69d8d
Instruction Fuzzy Hash: FAE0EC66A16A8981EB155F54E4443256320EB59B35F184325C9BE493E1DF2CC056DB41

Function 00007FF639B767E4 Relevance: 1.5, APIs: 1, Instructions: 15encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF639B76809

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: c0ecaade023c7c5438be8ec57768887cbdde6dd50da90feb4adb756e07aec19f
Instruction ID: b581e15296095f900f6b8f1a14934c82a00b16d2bb1a011be7dc035e314e8243
Opcode Fuzzy Hash: c0ecaade023c7c5438be8ec57768887cbdde6dd50da90feb4adb756e07aec19f
Instruction Fuzzy Hash: 5CE08C66A26A89C1EB145F14E4403256320EB49B39F184334CA7E493E0CF2C80469702

Function 00007FF639B793B0 Relevance: 1.5, APIs: 1, Instructions: 14encryptionCOMMON

Download Yara Rule

APIs

CryptCreateHash.ADVAPI32 ref: 00007FF639B793D4

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CreateCryptHash
String ID:
API String ID: 4184778727-0
Opcode ID: 98d20867d7066a821d93434f146e074bcc444b41e4472ce19979e74656ec95c8
Instruction ID: da1cf7f9623e4bfc8cc20c9ca63295ee93cbcffbf1bca8f9ec1122a05fc0774d
Opcode Fuzzy Hash: 98d20867d7066a821d93434f146e074bcc444b41e4472ce19979e74656ec95c8
Instruction Fuzzy Hash: E4D05E26A3858A83E7500B60A811B265251F79DB88F144030CE4D46B14CE2D90119E04

Function 00007FF639B793E4 Relevance: 1.5, APIs: 1, Instructions: 13encryptionCOMMONLIBRARYCODE

Download Yara Rule

APIs

CryptDestroyHash.ADVAPI32 ref: 00007FF639B793FE

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroyHash
String ID:
API String ID: 174375392-0
Opcode ID: f12d1e4f20d26a8b9e6522805fa58c12be315c42b71e23e4955aa42ef771b946
Instruction ID: ade32620d58c1ef9049395edda0fdc83654adedf2eb344e8b6d5144223f3a3a7
Opcode Fuzzy Hash: f12d1e4f20d26a8b9e6522805fa58c12be315c42b71e23e4955aa42ef771b946
Instruction Fuzzy Hash: 7BD0A766925A49C1FF204F24E8043356310AF59B35F280720C97F452D4CF2C80024601

Function 00007FF639B72638 Relevance: 1.5, APIs: 1, Instructions: 11COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF639B7264A

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 80538321c000e645ece4a1aef763e3b14a5d6f098b9dd098b656d6fd2bd4e3eb
Instruction ID: 927e47e210c85ba8a583fa7f7ff1edc7932707253809365edf894e0eec5fe8e1
Opcode Fuzzy Hash: 80538321c000e645ece4a1aef763e3b14a5d6f098b9dd098b656d6fd2bd4e3eb
Instruction Fuzzy Hash: 93C01252A1658D81EF195F92E48533552109F5CB09F1C4124CA1E4D254CE2CC4D69A11

Function 00007FF639B7681C Relevance: 1.5, APIs: 1, Instructions: 11encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF639B7682E

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: f7e85880c7b69266bfa1061f4890ceae93610472ec3f9f76e63c11928a607e6a
Instruction ID: 3f81f59fd00e35b5f87b27ffbb353073b20c3f5e0ebb225d09a25b6312d53b2e
Opcode Fuzzy Hash: f7e85880c7b69266bfa1061f4890ceae93610472ec3f9f76e63c11928a607e6a
Instruction Fuzzy Hash: FFC01252A1654DC1EF195F92E48533552209F5CF49F1C4124C90E4D244DE2888D5D615

Function 00007FF639B79F60 Relevance: 1.3, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF639B79F7A

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 0e9b2a0f05a54dbdbbbb70c905eac55b7e19eb69d8a076477a5d9fb44cf26c37
Instruction ID: e119dfb0a3858890dcfffdd4474e35b59b579bd0c98911a1ce94d3778fa5b29b
Opcode Fuzzy Hash: 0e9b2a0f05a54dbdbbbb70c905eac55b7e19eb69d8a076477a5d9fb44cf26c37
Instruction Fuzzy Hash: 221114B3918B8993E319CF39D6405A87371F79DB88B149325DF9807A06DB34E5A4CB04

Function 00007FF639B7BC08 Relevance: 24.8, APIs: 5, Strings: 9, Instructions: 280COMMON

Download Yara Rule

APIs

inet_ntoa.WS2_32 ref: 00007FF639B7BC86

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

Part of subcall function 00007FF639B71BAC: free.MSVCRT ref: 00007FF639B71BC2

inet_ntoa.WS2_32 ref: 00007FF639B7BD5F
free.MSVCRT ref: 00007FF639B7BF08
free.MSVCRT ref: 00007FF639B7BF9E
free.MSVCRT ref: 00007FF639B7C003

Part of subcall function 00007FF639B76E8C: free.MSVCRT ref: 00007FF639B76ED2

Strings

Creating circuit for hidden service introduce, connecting to '%s' (%s:%u), xrefs: 00007FF639B7BCBF
Extended..., xrefs: 00007FF639B7BE28
Connected..., xrefs: 00007FF639B7BD41
circuit %X is destroyed., xrefs: 00007FF639B7BF42
Introduced successfully..., xrefs: 00007FF639B7BFA9
Error while extending the introduce circuit, xrefs: 00007FF639B7BDCB
Sending introduce..., xrefs: 00007FF639B7BE37
Extending circuit to introduction point '%s' (%s:%u), xrefs: 00007FF639B7BD95
Introduce failed..., xrefs: 00007FF639B7BE9E

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$inet_ntoa$CurrentLocalThreadTime_cwprintf_s_l
String ID: Connected...$Creating circuit for hidden service introduce, connecting to '%s' (%s:%u)$Error while extending the introduce circuit$Extended...$Extending circuit to introduction point '%s' (%s:%u)$Introduce failed...$Introduced successfully...$Sending introduce...$circuit %X is destroyed.
API String ID: 173892578-86379327
Opcode ID: c3d497ce22ed9ef72ab2ad515a05373da521f6b7b71a60d6a690a5661c0ed545
Instruction ID: 6fd612d7415519209e65eb84f93b19347bc4a083e718fb825cfd28a00e39d1d4
Opcode Fuzzy Hash: c3d497ce22ed9ef72ab2ad515a05373da521f6b7b71a60d6a690a5661c0ed545
Instruction Fuzzy Hash: 8EC19462A08A8A86DB44DF25D4401AE7362FF8AF94F049631DA4F97764CF3CD846DF41

Function 00007FF639B820B8 Relevance: 23.0, APIs: 7, Strings: 6, Instructions: 276synchronizationthreadCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B71720: GetCurrentThreadId.KERNEL32 ref: 00007FF639B71743
Part of subcall function 00007FF639B71720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF639B7AB76), ref: 00007FF639B71750
Part of subcall function 00007FF639B71720: _cwprintf_s_l.LIBCMT ref: 00007FF639B71791

malloc.MSVCRT ref: 00007FF639B82161
malloc.MSVCRT ref: 00007FF639B8232C
memmove.MSVCRT ref: 00007FF639B82345
free.MSVCRT ref: 00007FF639B8234D

Part of subcall function 00007FF639B8293C: malloc.MSVCRT ref: 00007FF639B8295F

Part of subcall function 00007FF639B71BAC: free.MSVCRT ref: 00007FF639B71BC2

CreateThread.KERNEL32 ref: 00007FF639B8240D
WaitForSingleObject.KERNEL32 ref: 00007FF639B8246C
free.MSVCRT ref: 00007FF639B824C3

Strings

All pings completed, xrefs: 00007FF639B824A7
Ping url %s for %d times, xrefs: 00007FF639B820F4
Ping URL %s, xrefs: 00007FF639B82137
Wait for pings to complete..., xrefs: 00007FF639B82427
Start ping threads..., xrefs: 00007FF639B823A4
cached-consensus, xrefs: 00007FF639B820C5

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: freemalloc$Thread$CreateCurrentLocalObjectSingleTimeWait_cwprintf_s_lmemmove
String ID: All pings completed$Ping URL %s$Ping url %s for %d times$Start ping threads...$Wait for pings to complete...$cached-consensus
API String ID: 1567787208-2628093854
Opcode ID: bc29d203ff7ee13f9b25bf84f3f30204974b89ce12b1da41076159a449a2a8e9
Instruction ID: 02857c130ec5a9b0f34ca0a9efc1de776998ba412fa0dedbde1e42aa44d9a46c
Opcode Fuzzy Hash: bc29d203ff7ee13f9b25bf84f3f30204974b89ce12b1da41076159a449a2a8e9
Instruction Fuzzy Hash: 9AC1C232A18B8A96EB14CF61E8401AE73B5FB49784F544136DE8E83B68DF3CD455DB40

Function 00007FF639B71670 Relevance: 12.0, APIs: 8, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF639B716A4
GetStdHandle.KERNEL32 ref: 00007FF639B716B0
GetConsoleScreenBufferInfo.KERNEL32 ref: 00007FF639B716BE
GetStdHandle.KERNEL32 ref: 00007FF639B716C9
SetConsoleTextAttribute.KERNEL32 ref: 00007FF639B716D5
vprintf.MSVCRT ref: 00007FF639B716E1
GetStdHandle.KERNEL32 ref: 00007FF639B716EC
SetConsoleTextAttribute.KERNEL32 ref: 00007FF639B716FA

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: ConsoleHandle$AttributeText$BufferCriticalEnterInfoScreenSectionvprintf
String ID:
API String ID: 2254156624-0
Opcode ID: 277ca703be82f7eca63050ecd9ef302465b1a89250643f35432e010036c13fc1
Instruction ID: bc47dc5284f84bd3e1e2bf1d9d1174fbadccfb2bbd11e843870e4d4773813749
Opcode Fuzzy Hash: 277ca703be82f7eca63050ecd9ef302465b1a89250643f35432e010036c13fc1
Instruction Fuzzy Hash: 0911FE2561CB9AC2D6086F22A85402A7266FF8AFB1B144335DA6F537E8CF3CD445A705

Function 00007FF639B743B8 Relevance: 10.2, APIs: 8, Instructions: 172COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF639B743F7
memset.MSVCRT ref: 00007FF639B74413
memset.MSVCRT ref: 00007FF639B7442B
memset.MSVCRT ref: 00007FF639B7443C
memset.MSVCRT ref: 00007FF639B7446C
memset.MSVCRT ref: 00007FF639B74484
memset.MSVCRT ref: 00007FF639B74495
memset.MSVCRT ref: 00007FF639B744AD

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 99d2a30cf42a1e10fa95936dc0a1fdb4852ae732ad2ca4e50d2b8017e4c8556d
Instruction ID: fd2f8784d7725b7d5121abf2b962c44354f90df6ac3d7b7cd36ab2afaa221480
Opcode Fuzzy Hash: 99d2a30cf42a1e10fa95936dc0a1fdb4852ae732ad2ca4e50d2b8017e4c8556d
Instruction Fuzzy Hash: C7818222608BC481E7218F29E8416E9B7B5FF99788F041121EFC957B69EF34D295CB00

Function 00007FF639B85984 Relevance: 9.0, APIs: 6, Instructions: 44COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF639B859C2
free.MSVCRT ref: 00007FF639B859D0
free.MSVCRT ref: 00007FF639B859DE
free.MSVCRT ref: 00007FF639B859E9
DeleteCriticalSection.KERNEL32 ref: 00007FF639B859FD
free.MSVCRT ref: 00007FF639B85A06

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free$CriticalDeleteSection
String ID:
API String ID: 682657753-0
Opcode ID: 805e6df1cc499f4ef73f04709d9bf15cbb6c47a8e3a554051122e34981d85adc
Instruction ID: 40e12bdc3f96d5e1d9aa67f660b8c9aa6c3096270dd9b61c001dccf2103612e5
Opcode Fuzzy Hash: 805e6df1cc499f4ef73f04709d9bf15cbb6c47a8e3a554051122e34981d85adc
Instruction Fuzzy Hash: 56111F21A1CACAC2E6159F61E94017B6332FB8BBA0F100275DA5F937A5CF3DE4259B01

Function 00007FF639B80A04 Relevance: 8.0, APIs: 1, Strings: 4, Instructions: 484COMMON

Download Yara Rule

APIs

sscanf.MSVCRT ref: 00007FF639B80E92

Strings

https://, xrefs: 00007FF639B80DCC
http://, xrefs: 00007FF639B80B28, 00007FF639B80D6A
://, xrefs: 00007FF639B80A97
443, xrefs: 00007FF639B80E1B

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: sscanf
String ID: 443$://$http://$https://
API String ID: 3173990253-1974554892
Opcode ID: bcce99cae7d34eae4006356750e2105ace75c90cfdfdd6adf169f4a697650753
Instruction ID: 71244fe3887176201ce3d26be7e284827207434ea806408d9701ae341ef512ed
Opcode Fuzzy Hash: bcce99cae7d34eae4006356750e2105ace75c90cfdfdd6adf169f4a697650753
Instruction Fuzzy Hash: 392269B2B18B898AEB04CFA4D4841ED73B6FB49B987518126DF5E97B54EF38D114C380

Function 00007FF639B80024 Relevance: 7.7, APIs: 4, Strings: 1, Instructions: 223COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B71BAC: free.MSVCRT ref: 00007FF639B71BC2

Part of subcall function 00007FF639B72B6C: memmove.MSVCRT ref: 00007FF639B72C28
Part of subcall function 00007FF639B72B6C: memmove.MSVCRT ref: 00007FF639B72C5A
Part of subcall function 00007FF639B72B6C: memmove.MSVCRT ref: 00007FF639B72CB7

memcmp.MSVCRT ref: 00007FF639B801E0
free.MSVCRT ref: 00007FF639B801FD
free.MSVCRT ref: 00007FF639B8021D
free.MSVCRT ref: 00007FF639B80309

Part of subcall function 00007FF639B71D28: memmove.MSVCRT ref: 00007FF639B71D92

Strings

gfffffff, xrefs: 00007FF639B802DD

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: freememmove$memcmp
String ID: gfffffff
API String ID: 4015841801-1523873471
Opcode ID: 3e6345306120362285261a80a46a649393f94f877c6df6f2b92b62db0decc3a8
Instruction ID: acd47d971fd172c0eeaca46dc7185af8cb27bede4c822912961ca17ab8456298
Opcode Fuzzy Hash: 3e6345306120362285261a80a46a649393f94f877c6df6f2b92b62db0decc3a8
Instruction Fuzzy Hash: 27A1A272A18BCA86EB14DF65E4400EE7362FB4A794F105236EE4EA3B58DF38D540DB01

Function 00007FF639B76898 Relevance: 7.7, APIs: 1, Strings: 4, Instructions: 161COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF639B71DBC: _vscprintf.MSVCRT ref: 00007FF639B71DF1
Part of subcall function 00007FF639B71DBC: vsprintf_s.MSVCRT ref: 00007FF639B71E2F

free.MSVCRT ref: 00007FF639B76AD7

Strings

circuit::create_stream() [url: %s, stream: %u, status: created], xrefs: 00007FF639B76A3F
circuit::create_stream() [url: %s, stream: %u, status: creating], xrefs: 00007FF639B769CB
%s:%hi, xrefs: 00007FF639B768CD
circuit::create_stream() [is_ready() == false], xrefs: 00007FF639B76A6D

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: _vscprintffreevsprintf_s
String ID: %s:%hi$circuit::create_stream() [is_ready() == false]$circuit::create_stream() [url: %s, stream: %u, status: created]$circuit::create_stream() [url: %s, stream: %u, status: creating]
API String ID: 846591216-3309545152
Opcode ID: 0577b331d74e2903131822e17d341d0994d248a81c80c691fa5bffa814807aa4
Instruction ID: b04266688c0043da4b3bd1cddb82b8d6ced8b2083c4895611376309abd68baea
Opcode Fuzzy Hash: 0577b331d74e2903131822e17d341d0994d248a81c80c691fa5bffa814807aa4
Instruction Fuzzy Hash: F2717F22B19B8AD5E700DF65D4402EE33B2FB49B98F004236DA4E97B98DF38D115D741

Function 00007FF639B80560 Relevance: 6.5, APIs: 5, Instructions: 268COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3286127588.00007FF639B71000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF639B70000, based on PE: true

Associated: 00000000.00000002.3286111549.00007FF639B70000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286152988.00007FF639B86000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286169967.00007FF639B91000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3286185344.00007FF639B92000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff639b70000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 3036a327e3747fb4143e3568027a349821536520fa70720feae89e1d29fe0cef
Instruction ID: de0a6df9aa9daaadfcd574621fa393647dfc9c72dac84eb82356cfc6c4bef6dd
Opcode Fuzzy Hash: 3036a327e3747fb4143e3568027a349821536520fa70720feae89e1d29fe0cef
Instruction Fuzzy Hash: 69D12D72609B85C5EB24CF65E4802EEB371FB8A798F504226EB8E93B58DF38D544C741

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources. They can attempt to render stored data inaccessible by encrypting files or data on local and remote drives and withholding access to a decryption key. This may be done in order to extract monetary compensation from a victim in exchange for decryption or a decryption key (ransomware) or to render data permanently inaccessible in cases where the key is not saved or transmitted.
Tactics:	Impact
Data Sources:	Cloud Storage: Cloud Storage Modification, Command: Command Execution, File: File Creation, File: File Modification, Network Share: Network Share Access, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Payload 94.75 (2).225.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Boot Survival

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\Desktop\cached-consensus

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Imports

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

HTTP Request Dependency Graph

HTTP Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Windows Analysis Report
Payload 94.75 (2).225.exe

Function 00007FF639B727B0 Relevance: 45.6, APIs: 13, Strings: 13, Instructions: 80
libraryCOMMON

Function 00007FF639B78748 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 133
encryptionCOMMON

Function 00007FF639B7F42C Relevance: 18.1, APIs: 12, Instructions: 121
encryptionCOMMON

Function 00007FF639B7B17C Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 170
encryptionCOMMON

Function 00007FF639B7A9C0 Relevance: 17.7, APIs: 8, Strings: 2, Instructions: 157
encryptionCOMMON

Function 00007FF639B7B5F0 Relevance: 33.6, APIs: 4, Strings: 15, Instructions: 385
COMMON

Function 00007FF639B71160 Relevance: 26.4, APIs: 10, Strings: 5, Instructions: 154
COMMON

Function 00007FF639B7F654 Relevance: 23.1, APIs: 11, Strings: 2, Instructions: 346
COMMON

Function 00007FF639B81590 Relevance: 19.8, APIs: 2, Strings: 11, Instructions: 309
COMMON

Function 00007FF639B7605C Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 86
networkCOMMON

Function 00007FF639B7EDE0 Relevance: 18.2, APIs: 7, Strings: 5, Instructions: 232
COMMON

Function 00007FF639B7894C Relevance: 16.7, APIs: 2, Strings: 9, Instructions: 245
COMMON

Function 00007FF639B81294 Relevance: 16.0, APIs: 2, Strings: 7, Instructions: 201
COMMON

Function 00007FF639B713B4 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 164
registryCOMMON

Function 00007FF639B82520 Relevance: 15.2, APIs: 3, Strings: 7, Instructions: 201
COMMON