Edit tour

Windows Analysis Report
Payload 94.75 (2).225.exe

Overview

General Information

Sample name:	Payload 94.75 (2).225.exe
Analysis ID:	1547866
MD5:	9c972cb270fb33444a0f8d12d6176c7d
SHA1:	5a2839d6c6a6327342d51db71b4988aaf053b06f
SHA256:	4b385e050d5a880bee7bfd582d8bf75ff18d0c115c6b30f7d3e86742f7c5dfc1
Tags:	94-75-225-81exeuser-JAMESWT_MHT
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Connects to many ports of the same IP (likely port scanning)

Found Tor onion address

Machine Learning detection for sample

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Found potential string decryption / allocating functions

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Classification

Process Tree

System is w10x64

Payload 94.75 (2).225.exe (PID: 6812 cmdline: "C:\Users\user\Desktop\Payload 94.75 (2).225.exe" MD5: 9C972CB270FB33444A0F8D12D6176C7D)

conhost.exe (PID: 6840 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Payload 94.75 (2).225.exe (PID: 2844 cmdline: "C:\Users\user\Desktop\Payload 94.75 (2).225.exe" MD5: 9C972CB270FB33444A0F8D12D6176C7D)

conhost.exe (PID: 2944 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Payload 94.75 (2).225.exe (PID: 2144 cmdline: "C:\Users\user\Desktop\Payload 94.75 (2).225.exe" MD5: 9C972CB270FB33444A0F8D12D6176C7D)

conhost.exe (PID: 3328 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Sigma Signatures

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\Desktop\Payload 94.75 (2).225.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\Payload 94.75 (2).225.exe, ProcessId: 6812, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ipywep3r6u

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-03T09:41:40.109828+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.4	49745	TCP
2024-11-03T09:42:17.984215+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.4	49773	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Payload 94.75 (2).225.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: Payload 94.75 (2).225.exe	ReversingLabs: Detection: 76%
Source: Payload 94.75 (2).225.exe	Virustotal: Detection: 80%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.0% probability

Machine Learning detection for sample

Source: Payload 94.75 (2).225.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E099F4 CryptHashData,CryptHashData,CryptDestroyKey,CryptDestroyKey,	0_2_00007FF6E9E099F4
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0A9C0 CryptGenRandom,free,free,free,free,CryptGenRandom,inet_ntoa,inet_ntoa,	0_2_00007FF6E9E0A9C0
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0B17C free,free,free,memcmp,free,free,CryptGenRandom,	0_2_00007FF6E9E0B17C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0A16C memmove,CryptImportKey,	0_2_00007FF6E9E0A16C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0F42C malloc,memmove,CryptImportKey,free,CryptCreateHash,memset,CryptSetHashParam,CryptHashData,CryptGetHashParam,CryptDestroyHash,CryptDestroyKey,CryptDestroyHash,	0_2_00007FF6E9E0F42C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E093B0 CryptCreateHash,	0_2_00007FF6E9E093B0
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E1111C free,free,free,CryptGenRandom,free,free,	0_2_00007FF6E9E1111C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E01024 GetEnvironmentVariableA,LoadLibraryA,CryptAcquireContextA,CryptAcquireContextA,atexit,	0_2_00007FF6E9E01024
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E027B0 GetEnvironmentVariableA,LoadLibraryA,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptSetProperty,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,BCryptOpenAlgorithmProvider,	0_2_00007FF6E9E027B0
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E08748 CryptHashData,free,CryptDestroyHash,free,free,CryptHashData,free,CryptDestroyHash,free,free,	0_2_00007FF6E9E08748
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0E30C BCryptDestroyKey,	0_2_00007FF6E9E0E30C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0E2D0 BCryptDestroyKey,	0_2_00007FF6E9E0E2D0
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0D990 CryptDestroyKey,CryptDestroyKey,CryptDestroyKey,free,free,free,free,free,	0_2_00007FF6E9E0D990
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0E958 memset,memmove,memmove,memmove,BCryptImportKeyPair,BCryptExportKey,	0_2_00007FF6E9E0E958
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E02968 BCryptGenRandom,	0_2_00007FF6E9E02968
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E024A8 CryptStringToBinaryA,CryptStringToBinaryA,	0_2_00007FF6E9E024A8
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E09C84 CryptHashData,CryptDuplicateHash,CryptDestroyHash,free,memmove,free,free,	0_2_00007FF6E9E09C84
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0DC84 CryptDestroyKey,	0_2_00007FF6E9E0DC84
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E09410 CryptGetHashParam,	0_2_00007FF6E9E09410
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E093E4 CryptDestroyHash,	0_2_00007FF6E9E093E4
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0A388 CryptDestroyKey,free,	0_2_00007FF6E9E0A388
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0237C CryptBinaryToStringA,CryptBinaryToStringA,	0_2_00007FF6E9E0237C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0E350 BCryptDestroyKey,free,	0_2_00007FF6E9E0E350
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E09F1C CryptDuplicateHash,	0_2_00007FF6E9E09F1C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0E6E8 BCryptDestroyKey,free,	0_2_00007FF6E9E0E6E8
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E08ECC CryptHashData,CryptDestroyHash,	0_2_00007FF6E9E08ECC
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E09678 CryptDestroyHash,CryptDestroyHash,CryptDestroyKey,CryptDestroyKey,free,	0_2_00007FF6E9E09678
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0265C BCryptDestroyKey,free,	0_2_00007FF6E9E0265C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0DE60 memmove,CryptEncrypt,	0_2_00007FF6E9E0DE60
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E02638 BCryptDestroyKey,	0_2_00007FF6E9E02638
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E02600 BCryptDestroyKey,	0_2_00007FF6E9E02600
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0F5FC CryptDestroyHash,CryptDestroyKey,CryptDestroyHash,	0_2_00007FF6E9E0F5FC
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0DD8C CryptDecodeObject,CryptImportKey,	0_2_00007FF6E9E0DD8C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0E57C BCryptSecretAgreement,BCryptDeriveKey,BCryptDestroySecret,BCryptDestroyKey,	0_2_00007FF6E9E0E57C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E02574 CryptGenRandom,	0_2_00007FF6E9E02574
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E158AC BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,BCryptCloseAlgorithmProvider,	0_2_00007FF6E9E158AC
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E15868 CryptReleaseContext,CryptReleaseContext,	0_2_00007FF6E9E15868
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0E064 free,BCryptDestroyKey,	0_2_00007FF6E9E0E064
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E06840 CryptDestroyKey,free,	0_2_00007FF6E9E06840
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0681C CryptDestroyKey,	0_2_00007FF6E9E0681C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E09FFC memmove,memmove,CryptEncrypt,	0_2_00007FF6E9E09FFC
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E067E4 CryptDestroyKey,	0_2_00007FF6E9E067E4
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E097F4 CryptDestroyKey,	0_2_00007FF6E9E097F4
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E097B4 CryptDestroyKey,	0_2_00007FF6E9E097B4
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E09774 CryptDestroyKey,	0_2_00007FF6E9E09774
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E09F60 memset,CryptSetKeyParam,	0_2_00007FF6E9E09F60
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0E744 memset,memmove,memmove,memmove,BCryptImportKeyPair,	0_2_00007FF6E9E0E744

Source: Payload 94.75 (2).225.exe, 00000000.00000002.3533834585.0000027063EB5000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: -----BEGIN RSA PUBLIC KEY-----

memstr_92442b12-2

Source: unknown	HTTPS traffic detected: 107.189.1.198:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.128.102.56:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.8.96.71:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.162.11.98:443 -> 192.168.2.4:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 154.213.185.183:443 -> 192.168.2.4:50071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.99.170.35:443 -> 192.168.2.4:50079 version: TLS 1.2

Source: Payload 94.75 (2).225.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 188.213.92.88 ports 48912,1,2,4,8,9

Found Tor onion address

Source: Payload 94.75 (2).225.exe	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3534138478.00000270643FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3534138478.00000270643FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11b4831077
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3534138478.00000270643FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11t444cb54
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000000.00000000.1676330843.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000000.00000000.1676330843.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3534002370.000002242E46E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3534002370.000002242E46E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11t,1863,18C[>0
Source: Payload 94.75 (2).225.exe, 00000003.00000000.1761945131.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000003.00000000.1761945131.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3535101335.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3535101335.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3535069538.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000006.00000002.3535069538.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000006.00000000.1842621488.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000006.00000000.1842621488.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s

Source: global traffic	TCP traffic: 192.168.2.4:49733 -> 188.68.58.105:4825
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 185.162.251.94:9001
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 46.23.108.195:9001
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 79.210.207.14:9001
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 65.21.172.133:9004
Source: global traffic	TCP traffic: 192.168.2.4:49799 -> 45.141.215.116:9007
Source: global traffic	TCP traffic: 192.168.2.4:49895 -> 2.58.56.35:9000
Source: global traffic	TCP traffic: 192.168.2.4:49910 -> 167.235.112.134:9001
Source: global traffic	TCP traffic: 192.168.2.4:50062 -> 129.150.32.113:9090
Source: global traffic	TCP traffic: 192.168.2.4:50067 -> 188.213.92.88:48912
Source: global traffic	TCP traffic: 192.168.2.4:50072 -> 145.239.206.31:9001
Source: global traffic	TCP traffic: 192.168.2.4:50076 -> 185.220.101.169:10169
Source: global traffic	TCP traffic: 192.168.2.4:50084 -> 89.58.26.216:8430
Source: global traffic	TCP traffic: 192.168.2.4:50086 -> 185.220.101.27:9001

Source: Joe Sandbox View	IP Address: 199.254.238.52 199.254.238.52
Source: Joe Sandbox View	IP Address: 45.66.35.11 45.66.35.11

Source: Joe Sandbox View

JA3 fingerprint: c12f54a3f91dc7bafd92cb59fe009a35

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.4:49745
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.4:49773

Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 199.254.238.52User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fbd40937c6e1523ca717036fc4fd5ecc832a93b7 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fbd40937c6e1523ca717036fc4fd5ecc832a93b7 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a594fda26bd3c74c22da74b5a078baeb085ad481 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dee68ec30b95b475f5c9b0a53f39084ca063d5d8 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dee68ec30b95b475f5c9b0a53f39084ca063d5d8 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dee68ec30b95b475f5c9b0a53f39084ca063d5d8 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/03ccd8c021b75030122b48e5665a86e199ec989c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/03ccd8c021b75030122b48e5665a86e199ec989c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/03ccd8c021b75030122b48e5665a86e199ec989c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0bf417f376e3b950eb6811bf89b89fb417a203c3 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0bf417f376e3b950eb6811bf89b89fb417a203c3 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0bf417f376e3b950eb6811bf89b89fb417a203c3 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/3c18fb5dbbcf6c9ecedee0cb02fb89bc49ad7bbd HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a9e497f8d7038ac2068624917102eddc76f70c38 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/e0ec6db18ca367fe6d8478d32d760346e1c43f15 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/e0ec6db18ca367fe6d8478d32d760346e1c43f15 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/ce4005e2df2d752070acad2f6e1c853cb9d30c16 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/85fb50efa9c97896a6943cf3b54123c54444cb54 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/eff127fa3e850b17bf9a980afb010a172f6c6faf HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b0b0588c560a3f230418612aedf386449db81c7e HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/eff127fa3e850b17bf9a980afb010a172f6c6faf HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/238abd6efe42b1969da03d9725edad231e33ea6c HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/238abd6efe42b1969da03d9725edad231e33ea6c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/238abd6efe42b1969da03d9725edad231e33ea6c HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b7db49b44dd933c964b47c399a50f5d50fdf918c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b7db49b44dd933c964b47c399a50f5d50fdf918c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b7db49b44dd933c964b47c399a50f5d50fdf918c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/926955277c7bdb6cd1e1561a91847cbcd5b079e5 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/926955277c7bdb6cd1e1561a91847cbcd5b079e5 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/140e4fc6202fe17f46337058fc9848fa9055482b HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/97e7c6ec9f18b3503eaa0960e009402a26bc7c3a HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/97e7c6ec9f18b3503eaa0960e009402a26bc7c3a HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/450ce7ef6d774c61fdf6bbb53c8ec629cfe499b9 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/450ce7ef6d774c61fdf6bbb53c8ec629cfe499b9 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/450ce7ef6d774c61fdf6bbb53c8ec629cfe499b9 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/f163d4ab6b9ad4dc384f08cb8ce71b98e8a1eef3 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:

Source: unknown	TCP traffic detected without corresponding DNS query: 199.254.238.52
Source: unknown	TCP traffic detected without corresponding DNS query: 199.254.238.52
Source: unknown	TCP traffic detected without corresponding DNS query: 199.254.238.52
Source: unknown	TCP traffic detected without corresponding DNS query: 199.254.238.52
Source: unknown	TCP traffic detected without corresponding DNS query: 199.254.238.52
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244
Source: unknown	TCP traffic detected without corresponding DNS query: 193.23.244.244

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Code function: 0_2_00007FF6E9E061C4 recv,WSAGetLastError,

0_2_00007FF6E9E061C4

Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 199.254.238.52User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/status-vote/current/consensus HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fbd40937c6e1523ca717036fc4fd5ecc832a93b7 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fbd40937c6e1523ca717036fc4fd5ecc832a93b7 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a594fda26bd3c74c22da74b5a078baeb085ad481 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dee68ec30b95b475f5c9b0a53f39084ca063d5d8 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dee68ec30b95b475f5c9b0a53f39084ca063d5d8 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/dee68ec30b95b475f5c9b0a53f39084ca063d5d8 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/03ccd8c021b75030122b48e5665a86e199ec989c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/03ccd8c021b75030122b48e5665a86e199ec989c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/03ccd8c021b75030122b48e5665a86e199ec989c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0bf417f376e3b950eb6811bf89b89fb417a203c3 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0bf417f376e3b950eb6811bf89b89fb417a203c3 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/0bf417f376e3b950eb6811bf89b89fb417a203c3 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/3c18fb5dbbcf6c9ecedee0cb02fb89bc49ad7bbd HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a9e497f8d7038ac2068624917102eddc76f70c38 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/e0ec6db18ca367fe6d8478d32d760346e1c43f15 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/e0ec6db18ca367fe6d8478d32d760346e1c43f15 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/ce4005e2df2d752070acad2f6e1c853cb9d30c16 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/85fb50efa9c97896a6943cf3b54123c54444cb54 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/eff127fa3e850b17bf9a980afb010a172f6c6faf HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b0b0588c560a3f230418612aedf386449db81c7e HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/eff127fa3e850b17bf9a980afb010a172f6c6faf HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/238abd6efe42b1969da03d9725edad231e33ea6c HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/238abd6efe42b1969da03d9725edad231e33ea6c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/238abd6efe42b1969da03d9725edad231e33ea6c HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b7db49b44dd933c964b47c399a50f5d50fdf918c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b7db49b44dd933c964b47c399a50f5d50fdf918c HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/b7db49b44dd933c964b47c399a50f5d50fdf918c HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/926955277c7bdb6cd1e1561a91847cbcd5b079e5 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/926955277c7bdb6cd1e1561a91847cbcd5b079e5 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/140e4fc6202fe17f46337058fc9848fa9055482b HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/97e7c6ec9f18b3503eaa0960e009402a26bc7c3a HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/97e7c6ec9f18b3503eaa0960e009402a26bc7c3a HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/450ce7ef6d774c61fdf6bbb53c8ec629cfe499b9 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/450ce7ef6d774c61fdf6bbb53c8ec629cfe499b9 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/450ce7ef6d774c61fdf6bbb53c8ec629cfe499b9 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/f163d4ab6b9ad4dc384f08cb8ce71b98e8a1eef3 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7 HTTP/1.0Host: 216.218.219.41User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7 HTTP/1.0Host: 45.66.35.11User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:
Source: global traffic	HTTP traffic detected: GET /tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7 HTTP/1.0Host: 193.23.244.244User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0Data Raw: 00 Data Ascii:

Source: Payload 94.75 (2).225.exe, Payload 94.75 (2).225.exe, 00000000.00000002.3534138478.00000270643FE000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000000.00000000.1676330843.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3534002370.000002242E46E000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000000.1761945131.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3535101335.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000002.3535069538.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000000.1842621488.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000000.00000000.1676330843.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000000.1761945131.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3535101335.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000002.3535069538.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000000.1842621488.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11%s
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3534138478.00000270643FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11b4831077
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3534002370.000002242E46E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11t
Source: Payload 94.75 (2).225.exe, 00000000.00000002.3534138478.00000270643FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pm2pavba27wr4m34.onion/command.txt?sh11t444cb54
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3535020279.000002242EC79000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mastodon.social/
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3534313527.000002242E8B3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://quetzalcoatl-relays.org
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3534313527.000002242E8B3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://quetzalcoatl-relays.org/#support-us
Source: Payload 94.75 (2).225.exe, 00000000.00000003.1740593408.000002706473C000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1742062509.0000027064A03000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1742368730.0000027063EB7000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1743580978.0000027063EB7000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1742708867.0000027064742000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1746457745.000002706440A000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1736004907.000002706440E000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1737534341.000002706455D000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.1764886981.000002242D8A6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.1763919164.000002242DF3B000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.1767536815.000002242DBF0000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000003.1853792232.000001BA16DD1000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000003.1850549674.000001BA16A86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sabotage.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 107.189.1.198:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.128.102.56:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.8.96.71:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.162.11.98:443 -> 192.168.2.4:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 154.213.185.183:443 -> 192.168.2.4:50071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.99.170.35:443 -> 192.168.2.4:50079 version: TLS 1.2

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0A16C memmove,CryptImportKey,	0_2_00007FF6E9E0A16C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0F42C malloc,memmove,CryptImportKey,free,CryptCreateHash,memset,CryptSetHashParam,CryptHashData,CryptGetHashParam,CryptDestroyHash,CryptDestroyKey,CryptDestroyHash,	0_2_00007FF6E9E0F42C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0E958 memset,memmove,memmove,memmove,BCryptImportKeyPair,BCryptExportKey,	0_2_00007FF6E9E0E958
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0DD8C CryptDecodeObject,CryptImportKey,	0_2_00007FF6E9E0DD8C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0E744 memset,memmove,memmove,memmove,BCryptImportKeyPair,	0_2_00007FF6E9E0E744

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E027B0	0_2_00007FF6E9E027B0
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E0793C	0_2_00007FF6E9E0793C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E02B6C	0_2_00007FF6E9E02B6C
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Code function: 0_2_00007FF6E9E03E20	0_2_00007FF6E9E03E20

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Code function: String function: 00007FF6E9E01720 appears 102 times

Source: classification engine

Classification label: mal72.troj.evad.winEXE@6/1@0/25

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

File created: C:\Users\user\Desktop\cached-consensus

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3328:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6840:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2944:120:WilError_03

Source: Payload 94.75 (2).225.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Payload 94.75 (2).225.exe	ReversingLabs: Detection: 76%
Source: Payload 94.75 (2).225.exe	Virustotal: Detection: 80%

Source: unknown	Process created: C:\Users\user\Desktop\Payload 94.75 (2).225.exe "C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\Desktop\Payload 94.75 (2).225.exe "C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\Desktop\Payload 94.75 (2).225.exe "C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dssenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dssenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dssenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Section loaded: ncryptsslp.dll	Jump to behavior

Source: Payload 94.75 (2).225.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: Payload 94.75 (2).225.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: Payload 94.75 (2).225.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ipywep3r6u			Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ipywep3r6u			Jump to behavior

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe TID: 6816	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe TID: 6816	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe TID: 2764	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe TID: 2764	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe TID: 5768	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: Payload 94.75 (2).225.exe, 00000000.00000002.3533630717.000002706245C000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000002.3533573472.000001BA15008000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Payload 94.75 (2).225.exe, 00000003.00000002.3533622544.000002242BDF8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll$

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Code function: 0_2_00007FF6E9E01720 GetCurrentThreadId,GetLocalTime,_cwprintf_s_l,

0_2_00007FF6E9E01720

Source: C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	12 Archive Collected Data	22 Encrypted Channel	Exfiltration Over Other Network Medium	1 Data Encrypted for Impact
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	11 Virtualization/Sandbox Evasion	LSASS Memory	1 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Process Injection	Security Account Manager	11 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	3 System Information Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	12 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	1 Proxy	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Payload 94.75 (2).225.exe	76%	ReversingLabs	Win64.Ransomware.Cryptoff
Payload 94.75 (2).225.exe	80%	Virustotal		Browse
Payload 94.75 (2).225.exe	100%	Avira	HEUR/AGEN.1358352
Payload 94.75 (2).225.exe	100%	Joe Sandbox ML

Name	Malicious	Reputation
http://45.66.35.11/tor/server/fp/b0b0588c560a3f230418612aedf386449db81c7e	false	unknown
http://45.66.35.11/tor/server/fp/f163d4ab6b9ad4dc384f08cb8ce71b98e8a1eef3	false	unknown
http://193.23.244.244/tor/server/fp/0bf417f376e3b950eb6811bf89b89fb417a203c3	false	unknown
http://45.66.35.11/tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371	false	unknown
http://45.66.35.11/tor/server/fp/03ccd8c021b75030122b48e5665a86e199ec989c	false	unknown
http://216.218.219.41/tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077	false	unknown
http://216.218.219.41/tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7	false	unknown
http://193.23.244.244/tor/server/fp/ce4005e2df2d752070acad2f6e1c853cb9d30c16	false	unknown
http://45.66.35.11/tor/server/fp/97e7c6ec9f18b3503eaa0960e009402a26bc7c3a	false	unknown
http://193.23.244.244/tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46	false	unknown
http://193.23.244.244/tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac	false	unknown
http://193.23.244.244/tor/server/fp/140e4fc6202fe17f46337058fc9848fa9055482b	false	unknown
http://45.66.35.11/tor/server/fp/eff127fa3e850b17bf9a980afb010a172f6c6faf	false	unknown
http://216.218.219.41/tor/server/fp/238abd6efe42b1969da03d9725edad231e33ea6c	false	unknown
http://193.23.244.244/tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371	false	unknown
http://45.66.35.11/tor/server/fp/0bf417f376e3b950eb6811bf89b89fb417a203c3	false	unknown
http://193.23.244.244/tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077	false	unknown
http://216.218.219.41/tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76	false	unknown
http://216.218.219.41/tor/server/fp/a594fda26bd3c74c22da74b5a078baeb085ad481	false	unknown
http://216.218.219.41/tor/server/fp/97e7c6ec9f18b3503eaa0960e009402a26bc7c3a	false	unknown
http://45.66.35.11/tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76	false	unknown
http://216.218.219.41/tor/server/fp/dee68ec30b95b475f5c9b0a53f39084ca063d5d8	false	unknown
http://45.66.35.11/tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7	false	unknown
http://216.218.219.41/tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c	false	unknown
http://45.66.35.11/tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac	false	unknown
http://193.23.244.244/tor/server/fp/03ccd8c021b75030122b48e5665a86e199ec989c	false	unknown
http://45.66.35.11/tor/server/fp/b7db49b44dd933c964b47c399a50f5d50fdf918c	false	unknown
http://216.218.219.41/tor/server/fp/926955277c7bdb6cd1e1561a91847cbcd5b079e5	false	unknown
http://45.66.35.11/tor/server/fp/85fb50efa9c97896a6943cf3b54123c54444cb54	false	unknown
http://193.23.244.244/tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76	false	unknown
http://193.23.244.244/tor/server/fp/450ce7ef6d774c61fdf6bbb53c8ec629cfe499b9	false	unknown
http://193.23.244.244/tor/server/fp/e0ec6db18ca367fe6d8478d32d760346e1c43f15	false	unknown
http://193.23.244.244/tor/server/fp/238abd6efe42b1969da03d9725edad231e33ea6c	false	unknown
http://45.66.35.11/tor/server/fp/dee68ec30b95b475f5c9b0a53f39084ca063d5d8	false	unknown
http://193.23.244.244/tor/status-vote/current/consensus	false	unknown
http://45.66.35.11/tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077	false	unknown
http://216.218.219.41/tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46	false	unknown
http://45.66.35.11/tor/server/fp/fbd40937c6e1523ca717036fc4fd5ecc832a93b7	false	unknown
http://45.66.35.11/tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a	false	unknown
http://216.218.219.41/tor/server/fp/3c18fb5dbbcf6c9ecedee0cb02fb89bc49ad7bbd	false	unknown
http://193.23.244.244/tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7	false	unknown
http://216.218.219.41/tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371	false	unknown
http://199.254.238.52/tor/status-vote/current/consensus	false	unknown
http://193.23.244.244/tor/server/fp/fbd40937c6e1523ca717036fc4fd5ecc832a93b7	false	unknown
http://193.23.244.244/tor/server/fp/b7db49b44dd933c964b47c399a50f5d50fdf918c	false	unknown
http://45.66.35.11/tor/server/fp/450ce7ef6d774c61fdf6bbb53c8ec629cfe499b9	false	unknown
http://193.23.244.244/tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a	false	unknown
http://45.66.35.11/tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46	false	unknown
http://216.218.219.41/tor/server/fp/e0ec6db18ca367fe6d8478d32d760346e1c43f15	false	unknown
http://45.66.35.11/tor/server/fp/a9e497f8d7038ac2068624917102eddc76f70c38	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://pm2pavba27wr4m34.onion/command.txt?sh11b4831077	Payload 94.75 (2).225.exe, 00000000.00000002.3534138478.00000270643FE000.00000004.00000020.00020000.00000000.sdmp	true	unknown
https://quetzalcoatl-relays.org/#support-us	Payload 94.75 (2).225.exe, 00000003.00000002.3534313527.000002242E8B3000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://mastodon.social/	Payload 94.75 (2).225.exe, 00000003.00000002.3535020279.000002242EC79000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://pm2pavba27wr4m34.onion/command.txt?sh11t444cb54	Payload 94.75 (2).225.exe, 00000000.00000002.3534138478.00000270643FE000.00000004.00000020.00020000.00000000.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?sh11%s	Payload 94.75 (2).225.exe, 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000000.00000000.1676330843.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000000.1761945131.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3535101335.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000002.3535069538.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000000.1842621488.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	true	unknown
https://quetzalcoatl-relays.org	Payload 94.75 (2).225.exe, 00000003.00000002.3534313527.000002242E8B3000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://sabotage.net	Payload 94.75 (2).225.exe, 00000000.00000003.1740593408.000002706473C000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1742062509.0000027064A03000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1742368730.0000027063EB7000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1743580978.0000027063EB7000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1742708867.0000027064742000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1746457745.000002706440A000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1736004907.000002706440E000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000003.1737534341.000002706455D000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.1764886981.000002242D8A6000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.1763919164.000002242DF3B000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000003.1767536815.000002242DBF0000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000003.1853792232.000001BA16DD1000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000006.00000003.1850549674.000001BA16A86000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://pm2pavba27wr4m34.onion/command.txt?sh11	Payload 94.75 (2).225.exe, Payload 94.75 (2).225.exe, 00000000.00000002.3534138478.00000270643FE000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000000.00000000.1676330843.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3534002370.000002242E46E000.00000004.00000020.00020000.00000000.sdmp, Payload 94.75 (2).225.exe, 00000003.00000000.1761945131.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000003.00000002.3535101335.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000002.3535069538.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp, Payload 94.75 (2).225.exe, 00000006.00000000.1842621488.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmp	true	unknown
http://pm2pavba27wr4m34.onion/command.txt?sh11t	Payload 94.75 (2).225.exe, 00000003.00000002.3534002370.000002242E46E000.00000004.00000020.00020000.00000000.sdmp	true	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
129.150.32.113	unknown	United States	4192	STORTEK-INTUS	false
89.58.26.216	unknown	Germany	5430	FREENETDEfreenetDatenkommunikationsGmbHDE	false
188.68.58.105	unknown	Germany	197540	NETCUP-ASnetcupGmbHDE	false
199.254.238.52	unknown	United States	16652	RISEUPUS	false
154.213.185.183	unknown	Seychelles	22769	DDOSING-BGP-NETWORKUS	false
46.23.108.195	unknown	Azerbaijan	15723	AZERONLINEAZ	false
172.93.106.189	unknown	United States	23470	RELIABLESITEUS	false
216.218.219.41	unknown	United States	6939	HURRICANEUS	false
145.239.206.31	unknown	France	16276	OVHFR	false
185.220.101.27	unknown	Germany	208294	ASMKNL	false
45.66.35.11	unknown	Netherlands	47482	SPECTRENL	false
2.58.56.35	unknown	Netherlands	9119	SOFTNET-ASInternetServiceProviderinSloveniaandSouthE	false
65.21.172.133	unknown	United States	199592	CP-ASDE	false
79.210.207.14	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
185.220.101.169	unknown	Germany	208294	ASMKNL	false
188.213.92.88	unknown	Bulgaria	62235	GRUPOINFOSHOPES	true
167.235.112.134	unknown	United States	3525	ALBERTSONSUS	false
195.128.102.56	unknown	Germany	197540	NETCUP-ASnetcupGmbHDE	false
139.99.170.35	unknown	Canada	16276	OVHFR	false
185.162.251.94	unknown	Germany	197540	NETCUP-ASnetcupGmbHDE	false
204.8.96.71	unknown	United States	22581	ACE-STXVI	false
139.162.11.98	unknown	Netherlands	63949	LINODE-APLinodeLLCUS	false
107.189.1.198	unknown	United States	53667	PONYNETUS	false
193.23.244.244	unknown	Germany	50472	CHAOS-ASDE	false
45.141.215.116	unknown	Netherlands	62068	SPECTRAIPSpectraIPBVNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1547866
Start date and time:	2024-11-03 09:40:26 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Payload 94.75 (2).225.exe
Detection:	MAL
Classification:	mal72.troj.evad.winEXE@6/1@0/25
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 60 Number of non-executed functions: 49
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
08:41:17	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ipywep3r6u C:\Users\user\Desktop\Payload 94.75 (2).225.exe
08:41:25	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run ipywep3r6u C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
45.66.35.11	Payload 94.75 (4).225.exe	Get hash	malicious	Kronos, Strela Stealer	Browse	45.66.35.11/tor/server/fp/7502c6382100a6ff1d40dc3546733116ffd66576
45.66.35.11	Payload 94.75 (3).225.exe	Get hash	malicious	Unknown	Browse	45.66.35.11/tor/server/fp/da4b488c2826dfbbd04d635da1e71a2ba5b20747
199.254.238.52	https://github.com/chronosmiki/RANSOMWARE-WANNACRY-2.0/raw/master/Ransomware.WannaCry.zip	Get hash	malicious	Wannacry, Conti	Browse
	Wannacry.exe	Get hash	malicious	Wannacry, Conti	Browse
	SPXp2YHDFz.exe	Get hash	malicious	Unknown	Browse
	ILI1MGzcig.exe	Get hash	malicious	Unknown	Browse
	lwRhzjuYIg.exe	Get hash	malicious	Unknown	Browse
172.93.106.189	47CkiftRs9.exe	Get hash	malicious	Unknown	Browse
172.93.106.189	7GfciIf7ys.exe	Get hash	malicious	Unknown	Browse
216.218.219.41	Payload 94.75 (4).225.exe	Get hash	malicious	Kronos, Strela Stealer	Browse	216.218.219.41/tor/server/fp/d7316bf7fd633dd7474b18c33e1d5fdeb04d26a7
216.218.219.41	Payload 94.75 (3).225.exe	Get hash	malicious	Unknown	Browse	216.218.219.41/tor/server/fp/e11429be89ee8231c6e542c907b7e4eff572572e

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FREENETDEfreenetDatenkommunikationsGmbHDE	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	89.62.235.220
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	89.59.33.145
	splmpsl.elf	Get hash	malicious	Unknown	Browse	62.104.175.35
	nklarm5.elf	Get hash	malicious	Unknown	Browse	89.49.3.138
	splsh4.elf	Get hash	malicious	Unknown	Browse	89.61.247.84
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse	89.53.55.160
	botnet.x86.elf	Get hash	malicious	Mirai, Moobot	Browse	89.57.6.170
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	89.54.181.46
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	89.55.219.101
	botnet.spc.elf	Get hash	malicious	Mirai, Moobot	Browse	89.58.116.1
NETCUP-ASnetcupGmbHDE	Payload 94.75 (3).225.exe	Get hash	malicious	Unknown	Browse	5.252.227.76
	Payload 94.75.225.exe	Get hash	malicious	Unknown	Browse	46.38.233.211
	Pt7TlAjQtn.exe	Get hash	malicious	AveMaria, WhiteSnake Stealer	Browse	46.38.254.223
	file.exe	Get hash	malicious	WhiteSnake Stealer	Browse	185.233.107.110
	RFNnJGB7wy.elf	Get hash	malicious	Mirai	Browse	185.170.115.77
	pqb9xEwv5y.elf	Get hash	malicious	Unknown	Browse	193.30.120.112
	SecuriteInfo.com.PUA.Tool.InstSrv.3.16098.13705.exe	Get hash	malicious	Unknown	Browse	46.38.237.104
	SecuriteInfo.com.PUA.Tool.InstSrv.3.16098.13705.exe	Get hash	malicious	Unknown	Browse	46.38.237.104
	na.elf	Get hash	malicious	Mirai	Browse	185.194.141.231
	y	Get hash	malicious	Unknown	Browse	92.60.39.208
RISEUPUS	https://github.com/chronosmiki/RANSOMWARE-WANNACRY-2.0/raw/master/Ransomware.WannaCry.zip	Get hash	malicious	Wannacry, Conti	Browse	199.254.238.52
	Wannacry.exe	Get hash	malicious	Wannacry, Conti	Browse	199.254.238.52
	.exe	Get hash	malicious	Unknown	Browse	198.252.153.129
	ydbWyoxHsd.exe	Get hash	malicious	Unknown	Browse	198.252.153.129
	Readme.exe	Get hash	malicious	Unknown	Browse	198.252.153.129
	SPXp2YHDFz.exe	Get hash	malicious	Unknown	Browse	199.254.238.52
	ILI1MGzcig.exe	Get hash	malicious	Unknown	Browse	199.254.238.52
	document.txt .exe	Get hash	malicious	Unknown	Browse	198.252.153.129
	lwRhzjuYIg.exe	Get hash	malicious	Unknown	Browse	199.254.238.52
	Update-KB7390-x86.exe	Get hash	malicious	Unknown	Browse	198.252.153.129
STORTEK-INTUS	Payload 94.75 (4).225.exe	Get hash	malicious	Kronos, Strela Stealer	Browse	129.150.56.220
	Payload 94.75.225.exe	Get hash	malicious	Unknown	Browse	129.151.198.94
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	160.35.68.133
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse	129.191.96.15
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	129.191.84.61
	SecuriteInfo.com.PossibleThreat.DU.6301.11346.exe	Get hash	malicious	Unknown	Browse	129.151.136.35
	mips.elf	Get hash	malicious	Mirai	Browse	129.152.255.138
	m68k.elf	Get hash	malicious	Unknown	Browse	129.150.69.255
	na.elf	Get hash	malicious	Mirai	Browse	129.150.69.206
	firmware.armv5l.elf	Get hash	malicious	Unknown	Browse	129.150.204.101

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
c12f54a3f91dc7bafd92cb59fe009a35	Payload 94.75 (4).225.exe	Get hash	malicious	Kronos, Strela Stealer	Browse	195.128.102.56 154.213.185.183 139.99.170.35 204.8.96.71 139.162.11.98 107.189.1.198
	Payload 94.75 (3).225.exe	Get hash	malicious	Unknown	Browse	195.128.102.56 154.213.185.183 139.99.170.35 204.8.96.71 139.162.11.98 107.189.1.198
	dnlib.exe	Get hash	malicious	Unknown	Browse	195.128.102.56 154.213.185.183 139.99.170.35 204.8.96.71 139.162.11.98 107.189.1.198
	2y0EV2jtyQ.exe	Get hash	malicious	Unknown	Browse	195.128.102.56 154.213.185.183 139.99.170.35 204.8.96.71 139.162.11.98 107.189.1.198
	SecuriteInfo.com.Win32.BankerX-gen.16604.2792.exe	Get hash	malicious	Unknown	Browse	195.128.102.56 154.213.185.183 139.99.170.35 204.8.96.71 139.162.11.98 107.189.1.198
	FileViewer.exe	Get hash	malicious	Unknown	Browse	195.128.102.56 154.213.185.183 139.99.170.35 204.8.96.71 139.162.11.98 107.189.1.198
	a6pN09gwZj.exe	Get hash	malicious	Unknown	Browse	195.128.102.56 154.213.185.183 139.99.170.35 204.8.96.71 139.162.11.98 107.189.1.198
	a6pN09gwZj.exe	Get hash	malicious	Unknown	Browse	195.128.102.56 154.213.185.183 139.99.170.35 204.8.96.71 139.162.11.98 107.189.1.198
	fL271NVAru.exe	Get hash	malicious	Unknown	Browse	195.128.102.56 154.213.185.183 139.99.170.35 204.8.96.71 139.162.11.98 107.189.1.198

Process:	C:\Users\user\Desktop\Payload 94.75 (2).225.exe
File Type:	ASCII text, with very long lines (1006)
Category:	dropped
Size (bytes):	3349570
Entropy (8bit):	5.543432804114257
Encrypted:	false
SSDEEP:	12288:t11oJxhm/Dbzbs/oP/vfdsdUGzfsCTThFUHyd:t18mrrP4bHhmSd
MD5:	94B33CF167162F33234C9C487AE1231F
SHA1:	936374BA0A6A17D5C34B41824C7DBDB3D6F1A7D4
SHA-256:	964B6E7CBE04F746917CE7448A43E7DB8111C096EF534D652E0C47EAA5024CD9
SHA-512:	C88AADF9AFCDD1EE5F8EA84D2C3F5A3F6EA50789C9C2A406491FA70497DEE885D7D4194641101B9F6668195DA66891234DE1725BD525A0A063CFE474715507DB
Malicious:	false
Reputation:	low
Preview:	network-status-version 3.vote-status consensus.consensus-method 33.valid-after 2024-11-03 08:00:00.fresh-until 2024-11-03 09:00:00.valid-until 2024-11-03 11:00:00.voting-delay 300 300.client-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13.server-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13.known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2.recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2.required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.para

Static File Info

General

File type:	PE32+ executable (console) x86-64, for MS Windows
Entropy (8bit):	6.070474575760456
TrID:	Win64 Executable Console (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Payload 94.75 (2).225.exe
File size:	133'642 bytes
MD5:	9c972cb270fb33444a0f8d12d6176c7d
SHA1:	5a2839d6c6a6327342d51db71b4988aaf053b06f
SHA256:	4b385e050d5a880bee7bfd582d8bf75ff18d0c115c6b30f7d3e86742f7c5dfc1
SHA512:	7adcb3e3333dbd56b174a34c6916001290b391a1cb6f448d88a27ced9b2e7da3217438e7f7c4795b2c111f3e84118a75b7e60f6c0ed7f4a4597b25b9213dfd57
SSDEEP:	1536:Q/+2/nOWZqOLANpK4gBt3aLYom28srd5Xw0s43NB7GDNMiuqA4wUb//uIGTphAtp:Q/BnPGNSq41srYCm28B7Fl7IxcW4
TLSH:	F1D34A7D7EE881FAC0A6C47AD5D18A42F3B2B4021F3A975F04D6132E4F376919E2D126
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......L..2..la..la..la..m`..lam.m`..la..mab.laZ.o`..la..e`6.la..n`..laRich..la........................PE..d...T.._.........."......L.

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x140002348
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x5FECCD54 [Wed Dec 30 18:56:20 2020 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	1e6846ec68cd8341fea5c898085896c4

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007FC53D54F06Ch
call 00007FC53D54F0FBh
call 00007FC53D54DFDAh
int3
xor eax, eax
ret
int3
dec eax
sub esp, 38h
dec eax
mov dword ptr [esp+20h], FFFFFFFEh
call dword ptr [00013F3Dh]
nop
dec eax
add esp, 38h
ret
int3
int3
int3
dec esp
mov ebx, esp
dec ecx
mov dword ptr [ebx+08h], ecx
push edi
dec eax
sub esp, 40h
dec ecx
mov dword ptr [ebx-10h], FFFFFFFEh
dec ecx
mov dword ptr [ebx+18h], ebx
dec eax
mov ebx, edx
dec eax
mov edi, ecx
xor eax, eax
mov dword ptr [esp+30h], eax
dec eax
mov dword ptr [ecx+08h], eax
dec eax
mov dword ptr [ecx+10h], eax
dec eax
mov dword ptr [ecx+18h], eax
mov dword ptr [esp+30h], 00000001h
dec ecx
mov dword ptr [ebx+10h], eax
mov edx, dword ptr [edx+08h]
sub edx, dword ptr [ebx]
dec ecx
lea eax, dword ptr [ebx+10h]
dec ecx
mov dword ptr [ebx-28h], eax
inc ebp
xor ecx, ecx
inc ecx
mov eax, 4000000Ch
dec eax
mov ecx, dword ptr [ebx]
call dword ptr [00013CC1h]
dec eax
mov edx, dword ptr [esp+58h]
dec eax
dec edx
dec eax
mov ecx, edi
call 00007FC53D54E9BEh
dec esp
mov ecx, dword ptr [edi+08h]
dec eax
mov edx, dword ptr [ebx+08h]
dec eax
sub edx, dword ptr [ebx]
dec ecx
mov eax, ecx
dec eax
neg eax
dec ebp
sbb edx, edx
dec esp
and dword ptr [esp+58h], edx
dec eax
lea eax, dword ptr [esp+58h]
dec eax
mov dword ptr [esp+20h], eax
inc ecx
mov eax, 4000000Ch

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1f760	0xc8	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x22000	0x1230	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x24000	0x15c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x1a7e0	0x38	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x16000	0x320	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x14a44	0x14c00	8ffec25b841e8cca5e4d35eb574d1b3c	False	0.4900578878012048	data	6.265648485221872	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x16000	0xa130	0xa200	1b4f89bd48cc12c70988567f0aeee972	False	0.3666329089506173	data	4.809824534957627	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x21000	0x458	0x200	fe947f3474c7297905847e989f6facd9	False	0.0546875	Matlab v4 mat-file (little endian) \377\377\377\377, text, rows 1, columns 0	0.15842690200323517	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x22000	0x1230	0x1400	e2a232ed643b337858239f293b23a140	False	0.4505859375	data	4.7623224461872224	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x24000	0x15c	0x200	13ce8984733ea2839fc08a851e3d1bb9	False	0.533203125	data	4.101208923073317	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Imports

DLL	Import
bcrypt.dll	BCryptGenRandom, BCryptSetProperty, BCryptCloseAlgorithmProvider, BCryptOpenAlgorithmProvider, BCryptSecretAgreement, BCryptImportKeyPair, BCryptDestroySecret, BCryptDeriveKey, BCryptExportKey, BCryptDestroyKey
CRYPT32.dll	CryptBinaryToStringA, CryptStringToBinaryA, CryptDecodeObject
WS2_32.dll	WSACleanup, inet_addr, inet_ntoa, closesocket, gethostbyname, WSAStartup, send, socket, connect, recv, htons, setsockopt, WSAGetLastError
Secur32.dll	InitSecurityInterfaceA
KERNEL32.dll	CreateThread, TerminateThread, GetModuleFileNameA, Sleep, GetConsoleWindow, GetConsoleScreenBufferInfo, SetConsoleTextAttribute, GetStdHandle, GetCurrentThreadId, GetLocalTime, GetTickCount, GetCommandLineW, LocalFree, GetEnvironmentVariableA, LoadLibraryA, ReadFile, WriteFile, SetFilePointer, GetFileAttributesA, CreateFileA, CloseHandle, GetFileSize, FlushFileBuffers, WaitForSingleObject, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection
USER32.dll	ShowWindow
ADVAPI32.dll	RegEnumValueA, RegSetValueExA, CryptSetHashParam, CryptDuplicateHash, CryptEncrypt, CryptSetKeyParam, CryptImportKey, CryptDestroyKey, CryptCreateHash, CryptHashData, CryptDestroyHash, RegQueryInfoKeyA, RegCloseKey, CryptReleaseContext, RegOpenKeyExA, CryptGetHashParam, CryptGenRandom, CryptAcquireContextA
SHELL32.dll	CommandLineToArgvW
msvcrt.dll	__CxxFrameHandler3, atexit, vprintf, free, malloc, vsprintf_s, _vscprintf, sscanf, _mkgmtime, time, wcstombs, memmove, memchr, memcmp, memcpy, memset

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-03T09:41:40.109828+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.4	49745	TCP
2024-11-03T09:42:17.984215+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.4	49773	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 3, 2024 09:41:18.846539974 CET	49730	80	192.168.2.4	199.254.238.52
Nov 3, 2024 09:41:18.851519108 CET	80	49730	199.254.238.52	192.168.2.4
Nov 3, 2024 09:41:18.851635933 CET	49730	80	192.168.2.4	199.254.238.52
Nov 3, 2024 09:41:18.851675987 CET	49730	80	192.168.2.4	199.254.238.52
Nov 3, 2024 09:41:18.856587887 CET	80	49730	199.254.238.52	192.168.2.4
Nov 3, 2024 09:41:21.932086945 CET	80	49730	199.254.238.52	192.168.2.4
Nov 3, 2024 09:41:21.932204962 CET	49730	80	192.168.2.4	199.254.238.52
Nov 3, 2024 09:41:21.932279110 CET	49730	80	192.168.2.4	199.254.238.52
Nov 3, 2024 09:41:21.932746887 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:21.937410116 CET	80	49730	199.254.238.52	192.168.2.4
Nov 3, 2024 09:41:21.937547922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:21.937621117 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:21.937674999 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:21.942507982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.987242937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.987260103 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.987279892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.987292051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.987303972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.987309933 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:22.987320900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.987333059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.987338066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:22.987344980 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.987355947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.987366915 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:22.987368107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.987384081 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:22.987406015 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:22.992325068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.992387056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:22.992430925 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.137351036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.137402058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.137428999 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.137453079 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.137460947 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.137475967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.137499094 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.137554884 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.137594938 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.137624979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.137645960 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.137665987 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.137681007 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.137685061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.137727976 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.138423920 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.138437986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.138448954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.138468981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.138479948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.138501883 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.138546944 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.139266968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.139277935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.139290094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.139302969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.139321089 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.139345884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.286932945 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.286951065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.286957979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.286963940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.287098885 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.287134886 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.287187099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.287199020 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.287235022 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.287250996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.287261963 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.287273884 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.287286043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.287298918 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.287324905 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.288052082 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.288064003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.288074970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.288085938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.288098097 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.288100004 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.288110018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.288122892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.288125038 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.288146019 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.288182020 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.288913965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.288925886 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.288935900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.288947105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.288980961 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.594496012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.594537020 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.594548941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.594559908 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.594574928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.594587088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.594600916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.594603062 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.594655037 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.595475912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.595488071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.595498085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.595521927 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.595541954 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.595614910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.595627069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.595638037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.595649958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.595659018 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.595660925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.595678091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.595690012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.595690966 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.595700979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.595711946 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.595736027 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.596431017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.596489906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.596537113 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.596554041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.596565962 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.596601963 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.596604109 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.597069979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597115040 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.597178936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597188950 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597198963 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597208977 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597223997 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.597228050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597239017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597249985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597259998 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.597284079 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.597809076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597853899 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.597868919 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597879887 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597896099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597907066 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.597923040 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.597951889 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.743500948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743515968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743526936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743602991 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.743611097 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743623018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743634939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743647099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743652105 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.743659973 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743670940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743683100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743689060 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.743694067 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743705988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.743716002 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.743738890 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.744469881 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745090961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745134115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745141983 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.745146036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745162964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745181084 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.745328903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745341063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745351076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745376110 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.745395899 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745405912 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.745408058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745419025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745451927 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.745786905 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745835066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.745839119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745855093 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745866060 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745877028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.745902061 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.745928049 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.746206045 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.746259928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.746270895 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.746301889 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.746306896 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.746314049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.746325970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.746339083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.746351957 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.746372938 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.746953011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.746963978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.746973991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.746987104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.746998072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747004986 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.747009039 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747019053 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.747020006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747031927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747044086 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747055054 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747067928 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.747096062 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.747786999 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747833014 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.747876883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747888088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747898102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747914076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747925997 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.747931957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747942924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747955084 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747955084 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.747967005 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.747973919 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.747978926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.748020887 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.748848915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.748859882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.748869896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.748882055 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.748893023 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.748898029 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.748904943 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.748917103 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.748919010 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.748928070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.748939037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.748940945 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.748960972 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.748979092 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.893275023 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893296957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893307924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893335104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893346071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893357992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893369913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893377066 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893381119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893387079 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.893390894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893403053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893414021 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.893441916 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.893663883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893683910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893695116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893719912 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.893740892 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.893779039 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893790007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893800974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893811941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.893822908 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.893848896 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.894730091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.894748926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.894757986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.894795895 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.894973040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895020008 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.895025015 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895035982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895066977 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.895076036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895134926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895179987 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.895273924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895329952 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895340919 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895350933 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895375013 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895375967 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.895406961 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.895431995 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895447969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895458937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895471096 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895473957 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.895499945 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.895656109 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895703077 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.895731926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895741940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895752907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895764112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895776987 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.895780087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895791054 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895800114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895808935 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.895811081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895822048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.895853996 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.895895958 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.896688938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.896729946 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.896846056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.896856070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.896893024 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.897475958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.897494078 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.897538900 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.897635937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.897844076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.897890091 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.898057938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.898200989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.898214102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.898245096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.898428917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.898472071 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.898560047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.898720026 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.898763895 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.898885965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899045944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899058104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899084091 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.899627924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899640083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899652004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899662971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899672985 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.899674892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899686098 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899689913 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.899699926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899708986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899719954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899723053 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.899745941 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.899770021 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.899770975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899781942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899792910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899802923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899807930 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.899813890 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899826050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899840117 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.899846077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899854898 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899878025 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.899895906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.899926901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899940014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899950981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899961948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899972916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.899974108 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.900003910 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:23.900229931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.900242090 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:23.900278091 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.043162107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043181896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043189049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043194056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043201923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043210983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043216944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043221951 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043227911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043234110 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043240070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043251038 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043287039 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.043320894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043333054 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.043333054 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043344021 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043355942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043368101 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.043410063 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.043442011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043462038 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043482065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043493032 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043500900 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.043504000 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043531895 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.043607950 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043618917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043628931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043643951 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043657064 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043658972 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.043673992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043687105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043687105 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.043695927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.043706894 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.043736935 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.044542074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.044552088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.044568062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.044580936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.044589996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.044593096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.044606924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.044614077 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.044621944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.044631004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.044635057 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.044642925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.044652939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.044665098 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.044667959 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.044698954 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045280933 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045299053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045308113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045326948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045336962 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045348883 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045352936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045366049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045376062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045377970 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045399904 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045407057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045418978 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045511961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045522928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045533895 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045545101 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045556068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045562029 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045619965 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045624971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045636892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045646906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045659065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045670986 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045671940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045684099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045694113 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045718908 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045727968 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045732021 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045742989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045770884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045800924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045813084 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045823097 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045835018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045850992 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045851946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.045881033 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.045900106 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046039104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046082020 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046093941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046103954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046114922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046132088 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046161890 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046200991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046245098 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046339035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046350956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046366930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046377897 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046387911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046387911 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046399117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046410084 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046421051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046422005 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046432018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046443939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046448946 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046454906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046466112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046469927 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046482086 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046483994 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046493053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046516895 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046545982 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046725988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046736956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046747923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046760082 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046772003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046773911 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046782970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046794891 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046797991 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046817064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046878099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046889067 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046899080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046912909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046927929 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046935081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046945095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046956062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046961069 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046967030 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046977043 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.046977997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046988964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.046998978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047008991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047010899 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.047020912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047032118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047043085 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.047044039 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047055006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047065973 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047066927 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.047077894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047085047 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.047110081 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.047460079 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047503948 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.047605038 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047621012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047631979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047642946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047653913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047657967 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.047665119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047678947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047683001 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.047688961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047700882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047712088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047713995 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.047724009 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047734976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047738075 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.047745943 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.047761917 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.047781944 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.048139095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.048150063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.048161030 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.048178911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.048190117 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.048192978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.048206091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.048206091 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.048217058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.048227072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.048235893 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.048274994 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.192832947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.192847013 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.192857981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.192862988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.192876101 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.192888021 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.192898989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.192914009 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.192934990 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.192964077 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193032980 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193043947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193065882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193078041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193084002 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193089008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193135977 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193150043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193161011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193171978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193183899 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193195105 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193196058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193207979 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193212986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193223953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193234921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193243980 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193244934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193257093 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193273067 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193295002 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193315983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193326950 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193336964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193363905 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193377972 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193392992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193403959 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193413973 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193425894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193444014 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193469048 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193520069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193531036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193542004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193578005 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193588972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193588972 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193605900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.193618059 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.193643093 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194288969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194340944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194353104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194389105 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194395065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194406986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194443941 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194470882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194483042 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194499016 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194509983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194520950 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194526911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194536924 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194538116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194550037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194560051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194561005 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194570065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194591999 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194626093 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194703102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194714069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194722891 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194735050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194746017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194757938 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194768906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194782972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194786072 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194793940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194806099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194807053 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194816113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194830894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194835901 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194840908 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194852114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.194864035 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.194886923 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.195873976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.195893049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.195903063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.195919991 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.195940018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.195949078 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196022987 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196038961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196055889 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196067095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196073055 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196100950 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196110010 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196121931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196130991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196151972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196157932 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196166039 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196172953 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196180105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196190119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196201086 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196209908 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196213007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196237087 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196254969 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196261883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196271896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196281910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196294069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196301937 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196310997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196321964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196329117 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196362972 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196391106 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196400881 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196410894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196434975 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196512938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196523905 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196532965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196543932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196561098 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196562052 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196571112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196582079 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196590900 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196593046 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196608067 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196614027 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196624041 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196624994 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196635962 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196646929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196650982 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196676970 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196743965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196754932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196764946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196777105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196788073 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196818113 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196940899 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196950912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196960926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196971893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196984053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.196990013 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.196995974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197005987 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197006941 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197016001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197024107 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197033882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197042942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197051048 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197052956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197063923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197074890 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197078943 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197086096 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197097063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197102070 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197118044 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197141886 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197155952 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197271109 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197282076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197292089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197304010 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197314024 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197316885 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197324991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197346926 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197356939 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197417021 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197427988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197437048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197451115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197462082 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197463036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197474957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197478056 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197487116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197495937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197510004 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197535992 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197561979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197572947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197582960 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197593927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197602034 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197611094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197623014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197633028 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197633982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197644949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197649002 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197654963 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197678089 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197699070 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197889090 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197906017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197917938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197927952 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197937965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197947979 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197949886 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197959900 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197961092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197973013 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197983980 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.197989941 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.197994947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198007107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198014021 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.198019981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198030949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198035002 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.198055983 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.198064089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198075056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198084116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198095083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198101997 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.198106050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198117971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198129892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198132038 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.198139906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198151112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198154926 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.198163986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198174000 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.198191881 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.198312044 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198345900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198357105 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.198357105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.198393106 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.234576941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.234589100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.234596014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.234718084 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.342935085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.342951059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343003035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343014956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343025923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343044996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343056917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343065977 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343080044 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343091965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343101978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343115091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343151093 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343159914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343169928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343175888 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343175888 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343177080 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343177080 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343187094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343198061 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343198061 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343199015 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343199015 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343209982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343241930 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343278885 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343296051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343307018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343311071 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343322992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343341112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343344927 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343352079 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343362093 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343373060 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343378067 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343384981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343398094 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343403101 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343416929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343434095 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343453884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343463898 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343473911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343506098 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343516111 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343528032 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343538046 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343549967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343564034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343575001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343585968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343586922 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343616962 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343626976 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343647003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343657970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343668938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343688011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343689919 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343699932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343709946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343720913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343734980 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343770981 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343789101 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343800068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343811035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343822956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343833923 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343835115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343847036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343852043 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343858004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343880892 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343890905 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343911886 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.343940020 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343951941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.343986988 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.344002008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344013929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344023943 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344036102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344048023 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.344048023 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344069004 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.344088078 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.344146967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344253063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344264030 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344274044 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344290972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344295979 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.344302893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344314098 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344321966 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.344324112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344336033 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344348907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344352961 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.344358921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344369888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344381094 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.344398975 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.344413996 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.344940901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344950914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344961882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344974041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344985962 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.344990015 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345005989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345017910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345026016 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345040083 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345048904 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345060110 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345071077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345084906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345086098 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345096111 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345107079 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345120907 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345120907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345133066 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345149994 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345170021 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345181942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345199108 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345208883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345220089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345232964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345238924 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345243931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345257044 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345257044 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345267057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345272064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345278025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345288992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345299959 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345307112 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345333099 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345345020 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345865965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345909119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345921040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345954895 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.345957994 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345968962 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.345978975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346002102 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346016884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346158028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346272945 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346285105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346296072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346307039 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346317053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346321106 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346338034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346347094 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346349955 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346360922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346365929 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346371889 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346383095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346393108 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346398115 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346410990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346422911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346430063 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346434116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346446037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346463919 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346465111 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346482038 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346483946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346501112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346518040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346528053 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346534967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346546888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346558094 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346558094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346570969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346581936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346585989 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346595049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346606970 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346631050 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346640110 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346651077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346661091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346672058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346685886 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346688986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346698999 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346709967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346713066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346720934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346738100 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346764088 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346774101 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346786022 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346822977 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346892118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346903086 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346915007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346927881 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346934080 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346937895 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346949100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.346966028 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.346982956 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347034931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347079039 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347090960 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347116947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347121954 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347129107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347140074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347153902 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347170115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347181082 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347182035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347194910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347209930 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347359896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347372055 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347383022 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347393990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347402096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347405910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347415924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347426891 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347429037 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347445011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347450018 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347455025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347466946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347482920 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347495079 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347496033 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347507000 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347517967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347528934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347528934 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347538948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347549915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347558975 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347563028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347573996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347585917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347587109 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347596884 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347604036 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347608089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347619057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347620964 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347630978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347642899 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347655058 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347675085 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347780943 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347791910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347800970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347811937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347822905 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347822905 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347835064 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347846031 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347846031 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347856998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347862005 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347867966 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347879887 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347891092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347891092 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347908974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347917080 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347920895 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347932100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347943068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.347956896 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.347975016 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.348495007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.348507881 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.348519087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.348531961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.348541975 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.348543882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.348582029 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.384429932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.384453058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.384466887 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.384478092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.384485006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.384496927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.384504080 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.384716988 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.429215908 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.492705107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.492718935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.492738008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.492749929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.492759943 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.492773056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.492779016 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.492791891 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.492882967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.492886066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.492887020 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.492887020 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.492894888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.492906094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.492933035 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493079901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493092060 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493103027 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493113995 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493125916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493128061 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493136883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493148088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493150949 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493165016 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493175983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493185997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493187904 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493196011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493207932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493220091 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493223906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493242025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493251085 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493252993 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493264914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493272066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493274927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493285894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493298054 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493304014 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493309975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493320942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493331909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493338108 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493343115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493354082 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493360996 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493365049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493386030 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493386984 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493402958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493406057 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493421078 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493432045 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493442059 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493443966 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493453979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493465900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493472099 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493484974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493495941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493495941 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493506908 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493518114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493525028 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493529081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493540049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493550062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493561029 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493561983 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493571997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493573904 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493582964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493593931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493596077 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493604898 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493612051 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493616104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493627071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493638992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493654013 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493655920 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493666887 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493678093 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493688107 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493690014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493701935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493712902 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493720055 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493724108 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493733883 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493736982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493753910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493756056 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493766069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493777037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493788004 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493796110 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493808031 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493818045 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493825912 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493829012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493841887 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493844986 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493851900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493870974 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493871927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493882895 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493892908 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493901968 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493906021 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493921995 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493922949 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493932962 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493942022 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493944883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493957043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493973970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.493983984 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.493992090 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494009972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494013071 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494028091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494034052 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494040012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494050026 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494051933 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494062901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494072914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494082928 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494082928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494100094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494111061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494121075 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494122028 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494132042 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494143009 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494143963 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494154930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494164944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494184017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494184017 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494195938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494209051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494219065 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494220972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494231939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494237900 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494242907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494250059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494255066 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494254112 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494262934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494273901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494286060 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494302988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494307041 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494318962 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494326115 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494333029 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494344950 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494358063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494363070 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494368076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494379997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494386911 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494391918 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494405031 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494415998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494424105 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494441986 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494460106 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494465113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494482040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494493008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494503975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494517088 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494534969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494550943 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494550943 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494564056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494574070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494585991 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494585991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494597912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494607925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494609118 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494625092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494638920 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494641066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494648933 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494658947 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494661093 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494672060 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494678020 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494683981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494693995 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494705915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494713068 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494719982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494731903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494735003 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494743109 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494755030 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494762897 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494765997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494779110 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494786024 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494790077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494801998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494805098 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494812965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494824886 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494826078 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494859934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494863987 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494870901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494882107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494898081 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494899988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494911909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494923115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494932890 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494935036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494946003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494951963 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494956970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494961023 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.494967937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494980097 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494992018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.494997025 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495001078 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495021105 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495033979 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495296955 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495307922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495332003 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495358944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495376110 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495388985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495398998 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495399952 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495412111 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495423079 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495423079 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495455980 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495511055 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495528936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495538950 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495544910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495549917 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495560884 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495572090 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495582104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495587111 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495609999 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495624065 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495649099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495660067 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495670080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495688915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495701075 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495702982 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495712996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.495732069 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.495750904 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496105909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496118069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496129036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496150017 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496170998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496182919 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496193886 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496203899 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496213913 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496234894 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496376991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496423960 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496438026 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496494055 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496505022 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496515036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496526003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496541023 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496563911 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496655941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496668100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496679068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496695042 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496715069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496722937 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496726990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496737957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496776104 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496802092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496813059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496829033 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496840000 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496840954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496851921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496862888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496872902 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496874094 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496891975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496902943 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496903896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496915102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496922970 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496926069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496937990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496952057 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496973038 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496984959 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.496984959 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.496994972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497006893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497008085 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497024059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497033119 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497035980 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497047901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497059107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497068882 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497071981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497088909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497092962 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497101068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497109890 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497111082 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497123003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497133017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497143984 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497144938 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497154951 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497175932 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497200012 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497231007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497248888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497258902 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497268915 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497271061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497282982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497293949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497299910 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497306108 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497317076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497328043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497330904 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497339964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497350931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497351885 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497360945 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497366905 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497373104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497383118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497395039 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.497401953 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.497431993 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.499438047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.499449968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.499460936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.499471903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.499480009 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.499484062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.499495983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.499505997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.499516964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.499527931 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.499530077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.499540091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.499551058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.499556065 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.499579906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500226974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500237942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500248909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500261068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500272036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500272036 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500283003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500283003 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500294924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500305891 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500318050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500329018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500329018 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500339985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500346899 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500351906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500371933 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500371933 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500379086 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500384092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500396967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500407934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500418901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500420094 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500430107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500441074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500447035 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500452995 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500463963 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500464916 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500474930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500487089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500494003 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500505924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500515938 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500518084 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500529051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500530005 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500540018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500550985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500561953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500566006 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500574112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.500593901 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.500613928 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.534302950 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.534332991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.534343004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.534353971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.534365892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.534378052 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.534390926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.534400940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.534498930 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.534498930 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.534498930 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.642527103 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642540932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642550945 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642560005 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642570972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642581940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642594099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642602921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642615080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642626047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642637014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642649889 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.642708063 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.642708063 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.642708063 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.642708063 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643237114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643299103 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643321991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643333912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643349886 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643352032 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643362999 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643374920 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643374920 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643387079 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643405914 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643412113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643423080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643424988 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643434048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643444061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643465996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643472910 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643477917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643488884 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643500090 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643501043 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643512011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643516064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643549919 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643604040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643615007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643625021 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643635988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643647909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643651009 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643660069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643668890 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643671989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643682957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643695116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643701077 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643719912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643727064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643731117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643742085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643754959 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643767118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643774033 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643779993 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643791914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643793106 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643804073 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643815041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643821001 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643827915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643841028 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643848896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643866062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643874884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643877983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643894911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643904924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643906116 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643917084 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643927097 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643938065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643938065 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643950939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643955946 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643961906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643973112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643981934 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.643985033 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.643996954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644009113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644011974 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644028902 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644038916 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644041061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644051075 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644057035 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644062996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644081116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644085884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644092083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644104004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644114971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644114971 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644126892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644138098 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644139051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644150972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644156933 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644162893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644186974 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644205093 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644217014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644228935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644238949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644248962 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644260883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644265890 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644272089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644279003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644284010 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644289017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644289970 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644324064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644356012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644371986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644390106 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644392014 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644402027 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644412041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644422054 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644426107 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644433022 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644443989 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644443989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644454002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644465923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644468069 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644476891 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644488096 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644499063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644509077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644511938 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644512892 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644530058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644531012 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644546032 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644558907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644570112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644579887 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644579887 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644588947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644591093 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644601107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644612074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644629002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644633055 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644643068 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644643068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644655943 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644665956 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644668102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644679070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644691944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644695997 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644701004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644712925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644723892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644723892 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644735098 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644742012 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644747019 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644758940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644759893 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644769907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644784927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644793034 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644794941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644813061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644819021 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644824982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644831896 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644836903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644849062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644860029 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644860029 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644871950 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644882917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644887924 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644895077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644905090 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644906044 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644917011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644927025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644942045 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644946098 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644958019 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644969940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644973993 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.644979954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644985914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644990921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.644995928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645005941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645018101 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645030022 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645034075 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645040989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645051003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645060062 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645062923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645076036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645077944 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645093918 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645095110 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645104885 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645116091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645127058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645131111 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645138979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645152092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645153046 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645162106 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645170927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645176888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645183086 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645185947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645203114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645207882 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645215034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645226002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645239115 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645242929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645255089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645267010 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645271063 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645276070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645292044 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645293951 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645303965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645314932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645323038 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645328045 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645339012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645344973 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645349979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645363092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645374060 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645381927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645386934 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645394087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645405054 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645422935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645425081 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645433903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645443916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645447969 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645454884 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645466089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645472050 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645477057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645493984 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645500898 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645507097 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645514965 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645518064 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645529985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645541906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645555019 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645569086 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645579100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645590067 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645591974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645596981 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645602942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645613909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645625114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645627975 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645637989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645654917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645663023 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645665884 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645678043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645688057 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645694017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645704985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645705938 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645711899 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645723104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645733118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645739079 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645744085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645755053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645768881 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645776987 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645786047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645795107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645803928 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645806074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645817041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645823956 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645829916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645838022 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645840883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645853996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645864964 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645864964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645884037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645894051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645900965 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645905018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645915985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645926952 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645930052 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645936966 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645946980 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645951986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645962000 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645972967 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.645972967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645984888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645996094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.645998001 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646011114 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646012068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646024942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646035910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646039009 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646048069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646056890 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646065950 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646083117 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646084070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646095037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646105051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646116018 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646116972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646123886 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646130085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646142006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646147013 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646153927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646169901 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646188021 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646203041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646233082 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646239042 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646244049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646274090 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646295071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646306038 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646316051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646327972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646333933 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646352053 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646419048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646435976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646450996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646455050 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646469116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646480083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646483898 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646496058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646507978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646516085 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646518946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646531105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646541119 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646542072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646553993 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646567106 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646569967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646581888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646591902 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646594048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646605015 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646615982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646619081 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646625042 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646636009 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646636963 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646647930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646665096 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646665096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646678925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646688938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646697044 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646701097 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646712065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646713972 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646729946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646738052 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646747112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646758080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646768093 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646770954 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646778107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646789074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646801949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646801949 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646811962 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646826029 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646840096 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646840096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646851063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646863937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646874905 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646876097 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646887064 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646908998 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646914959 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646925926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646934032 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646936893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646949053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646960974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646962881 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.646971941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.646987915 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647008896 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647022009 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647032976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647042990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647059917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647070885 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647082090 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647083044 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647094011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647104979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647105932 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647115946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647120953 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647128105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647145033 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647147894 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647156000 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647167921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647173882 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647186995 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647188902 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647198915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647209883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647221088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647228003 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647231102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647242069 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647242069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647253990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647265911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647273064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647279024 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647296906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647336006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647344112 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647352934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647363901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647376060 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647387028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647391081 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647398949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647409916 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647411108 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647423029 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647439003 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647442102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647452116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647453070 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647463083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647474051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647485018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647494078 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647495985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647506952 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647507906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647520065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647531986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647538900 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647545099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647548914 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647556067 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647567034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647578955 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647588968 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647593975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647599936 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647613049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647624016 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647624969 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647634983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647653103 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647665024 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647667885 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647676945 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647689104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647692919 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647701025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647711992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647718906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647722960 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647733927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647738934 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647752047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647756100 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647766113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647778034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647789001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647789001 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647800922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647811890 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647818089 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647823095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647829056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647835016 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647844076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647855043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647865057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647865057 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647877932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647888899 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647891998 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647900105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647912025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.647929907 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.647953987 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.661039114 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.661088943 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.684158087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684206009 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.684276104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684287071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684298038 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684310913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684322119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684324026 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.684331894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684344053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684355021 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684366941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684369087 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.684372902 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684384108 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.684390068 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.684411049 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.726008892 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.791923046 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.791943073 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.791955948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.791965961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.791979074 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.791980028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.791990995 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792005062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792007923 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792032957 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792090893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792112112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792124033 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792131901 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792134047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792145967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792150021 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792162895 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792172909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792184114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792196989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792207003 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792207956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792220116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792228937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792239904 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792274952 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792308092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792347908 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792556047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792570114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792582035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792593002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792606115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792614937 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792618036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792629004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792639971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792642117 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792650938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792661905 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792676926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792678118 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792694092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792704105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792715073 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792716026 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792726040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792736053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792746067 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792757988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792757988 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792768955 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792785883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792797089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792809963 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792812109 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792821884 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792833090 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792838097 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792843103 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792855978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792860985 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792865992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792877913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792889118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792891026 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792900085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792908907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792921066 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792926073 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792931080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792943001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792944908 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792953968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792963028 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792964935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792974949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792982101 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.792985916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.792995930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793008089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793019056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793019056 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793030024 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793039083 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793040037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793051004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793062925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793083906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793112993 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793236971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793247938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793257952 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793276072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793277979 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793286085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793287992 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793298960 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793314934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793324947 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793325901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793350935 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793526888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793543100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793553114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793569088 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793581963 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793596029 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793606997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793613911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793623924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793634892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793653011 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793672085 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793795109 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793803930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793838978 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793844938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793867111 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793878078 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793885946 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793911934 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.793916941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793927908 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793937922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.793979883 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794043064 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794054031 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794064045 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794084072 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794101954 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794111013 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794121981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794132948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794145107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794154882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794176102 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794202089 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794280052 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794291973 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794302940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794318914 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794337034 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794346094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794356108 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794367075 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794384956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794390917 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794404030 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794414043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794428110 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794431925 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794440031 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794451952 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794451952 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794462919 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794476986 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794523001 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794548035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794559002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794569969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794580936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794591904 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794595957 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794624090 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794667006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794677973 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794687986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794698954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794707060 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794709921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794727087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794738054 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794738054 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794748068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794751883 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794764996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794776917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794785976 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794787884 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794799089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794811010 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794814110 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794821978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794831038 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794832945 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794845104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794856071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794858932 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794867992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794879913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794888973 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794907093 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794917107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794924974 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794928074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794938087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794949055 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794955015 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794960976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794971943 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794985056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.794994116 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.794996023 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795001030 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795007944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795017958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795028925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795039892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795042038 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795058012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795064926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795070887 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795074940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795087099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795098066 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795099020 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795108080 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795108080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795119047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795130014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795136929 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795141935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795147896 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795152903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795164108 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795175076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795183897 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795186043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795198917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795214891 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795218945 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795236111 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795238018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795248985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795259953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795272112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795289040 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795289993 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795299053 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795300961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795316935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795326948 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795327902 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795341969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795352936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795363903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795370102 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795376062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795389891 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795398951 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795402050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795413017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795423031 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795424938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795433998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795434952 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795443058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795458078 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795460939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795473099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795484066 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795492887 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795500994 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795514107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795522928 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795523882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795535088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795557022 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795591116 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795794010 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795902014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795912027 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795922041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795932055 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795943022 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795950890 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795955896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795967102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.795974016 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.795989037 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796009064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796246052 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796257019 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796267986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796288013 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796314955 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796328068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796344995 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796355963 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796364069 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796366930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796377897 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796379089 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796395063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796407938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796411037 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796417952 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796430111 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796441078 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796447039 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796473980 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796478033 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796485901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796488047 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796524048 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796673059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796684027 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796694994 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796735048 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796766043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796777010 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796787024 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796798944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796813965 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796833992 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796891928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796902895 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796914101 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796925068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796931028 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796936989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796947956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796955109 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.796960115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796972036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.796986103 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797020912 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797024965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797039986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797050953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797060966 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797060966 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797071934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797082901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797094107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797099113 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797103882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797117949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797132969 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797137022 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797147989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797158003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797166109 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797171116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797183037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797188044 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797194958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797205925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797214985 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797216892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797229052 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797236919 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797256947 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797285080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797302961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797313929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797323942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797327042 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797337055 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797348022 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797348976 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797362089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797373056 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797379017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797389984 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797399998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797410965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797410965 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797421932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797430992 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797435045 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797450066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797452927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797468901 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797468901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797482014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797494888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797506094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797512054 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797517061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797528982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797538996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797540903 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797549009 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797560930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797570944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797573090 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797583103 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797593117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797599077 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797610998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797626972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797633886 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797636986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797647953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797658920 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797663927 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797669888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797679901 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797682047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797692060 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797703028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797712088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797712088 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797724009 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797734022 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797739029 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797744989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797755003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797765017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797775984 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797782898 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797801018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797807932 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797812939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797828913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797838926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797840118 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797848940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797859907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797873020 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797880888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797892094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797902107 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797902107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797911882 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797914028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797930002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797940969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797943115 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797951937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797962904 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797969103 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797975063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797985077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.797990084 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.797996998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798007965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798008919 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798019886 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798031092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798041105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798051119 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798052073 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798073053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798074961 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798088074 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798090935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798104048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798104048 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798114061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798125029 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798136950 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798137903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798150063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798158884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798160076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798171997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798182011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798185110 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798192978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798199892 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798208952 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798226118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798233986 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798237085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798249006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798263073 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798266888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798285007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798289061 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798295975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798306942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798316956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798325062 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798327923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798340082 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798350096 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798351049 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798361063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798362970 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798373938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798386097 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798392057 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798397064 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798408031 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798419952 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798425913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798433065 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798437119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798449039 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798460007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798465014 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798480034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798491001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798491955 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798501968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798513889 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798516035 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798525095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798536062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798542023 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798547029 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798557997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798563004 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798568964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798578978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798582077 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798590899 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798602104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798603058 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798612118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798623085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798640966 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798641920 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798651934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798666000 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798666954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798677921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798680067 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798691034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798703909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798705101 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798713923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798724890 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798729897 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798736095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798747063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798755884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798758030 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798768997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798778057 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798779964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798787117 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798799038 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798815966 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798824072 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798831940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798846960 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798852921 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798858881 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798868895 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798880100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798883915 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798890114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798902035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798919916 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798919916 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798923016 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798933983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798944950 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798959017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798968077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798969030 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798979044 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798989058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.798994064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.798999071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799007893 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799011946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799022913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799034119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799036026 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799046040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799062014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799062967 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799079895 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799079895 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799089909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799094915 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799108028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799118996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799123049 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799129009 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799140930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799153090 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799155951 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799164057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799174070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799184084 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799185038 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799196005 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799206018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799211025 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799216986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799227953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799226999 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799237967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799248934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799252033 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799267054 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799276114 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799284935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799288034 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799302101 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799324036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799333096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799335003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799345016 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799355030 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799362898 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799366951 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799377918 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799387932 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799395084 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799406052 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799406052 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799424887 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799429893 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799438000 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799449921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799458027 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799460888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799472094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799483061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799488068 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799498081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799510002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799513102 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799524069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799535036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799537897 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799546003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799556971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799562931 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799566984 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799577951 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799588919 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799588919 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799598932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799609900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799614906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799621105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799627066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799632072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799644947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799647093 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799655914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799666882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.799675941 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.799700022 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.816864967 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.816911936 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.833916903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.833928108 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.833939075 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.833952904 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.833965063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.833990097 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.834095955 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834120989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834132910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834142923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834156036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834156036 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.834166050 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.834168911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834181070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834189892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834198952 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834204912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834216118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834228039 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834232092 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.834240913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834252119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.834261894 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.834270000 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.834270000 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.834290028 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.875679970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.875699997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.875704050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.875710011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.875849009 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.941689968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.941713095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.941720009 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.941725016 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.941730976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.941736937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.941744089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.941750050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.941755056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.941948891 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.941988945 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942013025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942025900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942035913 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942039967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942050934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942065954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942070007 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942078114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942107916 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942122936 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942214966 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942226887 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942236900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942249060 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942264080 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942286968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942298889 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942305088 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942343950 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942496061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942512035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942523003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942532063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942543983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942554951 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942563057 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942565918 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942575932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942583084 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942589045 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942599058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942608118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942617893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942620993 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942629099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942640066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942642927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942657948 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942662001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942677975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942692041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942698002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942698956 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942708015 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942719936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942733049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942734003 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942742109 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942748070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942753077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942758083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942763090 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942770004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942774057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942780018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942790985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942796946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942811012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942811012 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942828894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942846060 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942862988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942872047 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942874908 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942892075 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942900896 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942908049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942922115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942933083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942939043 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942944050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942946911 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942955017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942965984 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942975044 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.942975998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942989111 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942996979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.942996979 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943017006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943033934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943042994 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943044901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943061113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943073034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943083048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943094969 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943095922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943123102 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943123102 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943125010 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943136930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943146944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943160057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943170071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943181038 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943186045 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943193913 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943197012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943209887 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943219900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943232059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943238020 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943238020 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943243980 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943255901 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943255901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943267107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943279028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943289042 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943289995 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943301916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943310022 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943320036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943329096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943332911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943344116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943355083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943365097 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943367004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943392038 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943406105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943416119 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943455935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943468094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943478107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943490028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943500042 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943521976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943545103 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943568945 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943702936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943718910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943728924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943739891 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943752050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943763018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943763018 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943774939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943785906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943787098 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943794966 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943797112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943808079 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943820000 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943824053 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943830013 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943841934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943845034 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943861008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943875074 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943877935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943887949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943897009 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943898916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943909883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943922043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943932056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943938017 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943941116 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943948030 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.943948984 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943960905 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943970919 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943975925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943980932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943985939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.943995953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944006920 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944008112 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944019079 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944036007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944051981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944061995 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944062948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944072962 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944084883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944087029 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944094896 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944096088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944107056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944118023 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944128990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944129944 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944140911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944149017 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944152117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944163084 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944164038 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944174051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944184065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944185019 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944197893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944206953 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944212914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944225073 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944235086 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944243908 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944246054 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944262981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944267035 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944273949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944283009 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944292068 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944293976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944305897 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944317102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944319963 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944328070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944329023 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944346905 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944359064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944364071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944375992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944387913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944397926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944401979 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944408894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944411993 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944415092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944421053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944426060 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944432020 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944437027 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944448948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944459915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944470882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944482088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944500923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944506884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944513083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944528103 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944529057 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944540024 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944550037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944559097 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944559097 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944561958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944572926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944583893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944586992 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944595098 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944606066 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944606066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944617987 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944624901 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944628954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944638968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944649935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944650888 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944669008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944683075 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944693089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944696903 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944704056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944714069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944725037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944736004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944747925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944757938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944771051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944775105 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944781065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944793940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944803953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944808960 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944814920 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944828987 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944832087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944839001 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944849968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944866896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944878101 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944880009 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944889069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944900990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944909096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944910049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944921970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944931984 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944932938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944947958 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944948912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944961071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944963932 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.944973946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944983959 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.944993973 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945004940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945017099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945000887 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945028067 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945030928 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945039034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945050001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945055962 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945061922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945072889 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945072889 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945079088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945086956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945101976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945103884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945116043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945131063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945136070 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945142984 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945154905 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945166111 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945173979 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945177078 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945187092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945193052 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945198059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945209026 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945211887 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945221901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945231915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945234060 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945241928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945251942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945257902 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945266962 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945267916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945281982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945291042 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945298910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945312023 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945321083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945321083 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945338964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945348978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945358992 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945360899 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945373058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945384026 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945385933 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945395947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945405960 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945415974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945425987 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945432901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945449114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945458889 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945460081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945472002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945485115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945494890 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945506096 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945512056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945523024 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945525885 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945525885 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945533991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945544004 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945548058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945559025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945563078 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945575953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945591927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945602894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945604086 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945614100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945626020 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945627928 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945636988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945647955 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945653915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945664883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945674896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945676088 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945686102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945697069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945700884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945707083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945717096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945719004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945730925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945746899 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945756912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945768118 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945769072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945780039 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945785999 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945791006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945807934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945818901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945827961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945830107 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945839882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945854902 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945858002 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945873976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945884943 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945894957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945899963 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945904970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945920944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945924044 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945930958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945943117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945950985 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945954084 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945965052 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945971966 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945976019 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945981026 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.945987940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.945998907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946010113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946017027 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946021080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946032047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946034908 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946042061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946052074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946057081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946062088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946064949 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946068048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946074963 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946079969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946090937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946105003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946125031 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946146965 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946161032 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946202040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946213961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946234941 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946254969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946264982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946274996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946286917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946294069 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946321011 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946638107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946650028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946660042 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946680069 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946691036 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946702957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946713924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946726084 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946737051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946739912 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946748018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946764946 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946777105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946785927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946840048 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946935892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946947098 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946959019 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946969032 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.946969986 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.946999073 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947020054 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947040081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947051048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947057009 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947062969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947073936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947081089 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947107077 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947130919 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947144032 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947153091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947164059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947175980 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947180986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947196960 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947213888 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947293043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947304010 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947323084 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947334051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947344065 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947348118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947359085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947370052 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947371006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947387934 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947438955 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947449923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947460890 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947470903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947474957 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947483063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947493076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947501898 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947504997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947514057 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947515965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947526932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947537899 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947542906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947555065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947556973 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947590113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947592020 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947599888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947606087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947616100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947628975 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947629929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947640896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947652102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947654009 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947663069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947674990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947685957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947689056 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947695971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947705984 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947716951 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947716951 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947731972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947751045 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947757959 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947761059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947779894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947782993 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947791100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947798967 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947802067 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947813988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947824955 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947830915 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947835922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947848082 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947848082 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947860003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947871923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947874069 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947882891 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947896957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947909117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947911978 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947911978 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947921038 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947931051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947942019 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947951078 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947957993 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947968960 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947969913 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.947981119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.947992086 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948002100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948004961 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948013067 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948023081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948028088 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948035002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948045015 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948045969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948056936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948060989 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948072910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948090076 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948091030 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948102951 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948113918 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948116064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948123932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948136091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948139906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948148012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948158979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948165894 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948170900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948182106 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948182106 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948193073 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948204041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948211908 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948225975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948235989 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948242903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948252916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948265076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948266983 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948283911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948287010 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948296070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948312998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948312998 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948323965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948334932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948348045 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948348999 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948367119 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948371887 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948383093 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948393106 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948404074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948415041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948415041 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948426008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948436975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948447943 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948448896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948460102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948462963 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948471069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948479891 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948481083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948492050 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948492050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948510885 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948520899 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948528051 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948538065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948543072 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948558092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948574066 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948575974 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948585033 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948596954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948607922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948612928 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948612928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948620081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948625088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948630095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948641062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948652029 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948653936 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948662996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948668957 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948674917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948685884 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948687077 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948697090 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948704004 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948715925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948726892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948733091 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948736906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948754072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948760033 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948771954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948776007 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948781967 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948791027 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948802948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948802948 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948813915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948824883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948832035 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948836088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948848009 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948858976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948859930 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948868990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948868990 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948879957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948894978 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948895931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948906898 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948918104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948920965 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948928118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948937893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948949099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948956013 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948966026 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948976994 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.948987007 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.948988914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949001074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949011087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949013948 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949022055 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949031115 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949034929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949052095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949057102 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949064016 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949075937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949088097 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949089050 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949105978 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949150085 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949177980 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949202061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949218035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949229002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949239969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949239969 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949250937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949261904 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949264050 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949274063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949279070 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949285984 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949296951 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949301958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949306965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949316978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949321032 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949327946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949338913 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949341059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.949366093 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949446917 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.949459076 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.983782053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.983793974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.983807087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.983817101 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.983828068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.983839035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.983850002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.983867884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.983910084 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.983952999 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.983964920 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.983974934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.983992100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.983997107 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.984009027 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984020948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984031916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984036922 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.984042883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984054089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984054089 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.984065056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984076977 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984087944 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.984093904 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984105110 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984112978 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.984116077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984127998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984129906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.984137058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984148979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984150887 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.984159946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984172106 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984177113 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.984184027 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984194994 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984204054 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.984206915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984217882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:24.984220982 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:24.984247923 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.025515079 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.025527000 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.025537968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.025549889 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.025562048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.025583029 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.025629997 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093004942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093015909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093027115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093034029 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093049049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093060970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093070984 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093070984 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093081951 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093095064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093099117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093110085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093108892 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093127012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093142986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093152046 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093154907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093168020 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093178034 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093178034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093189955 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093200922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093209028 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093211889 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093234062 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093241930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093249083 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093252897 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093264103 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093277931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093286037 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093295097 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093307018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093316078 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093317032 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093327999 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093333006 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093338013 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093357086 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093364000 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093369007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093379021 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093388081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.093403101 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.093417883 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.094438076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.094449043 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.094459057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.094470024 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.094480991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.094481945 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.094506025 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.094517946 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.094533920 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.094546080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.094554901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.094578981 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095279932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095298052 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095308065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095324039 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095338106 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095346928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095408916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095421076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095431089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095444918 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095455885 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095482111 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095485926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095496893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095505953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095515966 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095526934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095527887 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095536947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095550060 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095562935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095572948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095576048 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095582962 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095594883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095602989 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095604897 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095616102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095619917 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095647097 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095701933 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095714092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095722914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095733881 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095746040 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095751047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095761061 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095762014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095773935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095778942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095783949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095784903 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095789909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095827103 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095930099 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095941067 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095951080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095962048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095972061 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095973969 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.095983028 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095993996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.095993996 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096009970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096015930 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096021891 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096030951 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096033096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096041918 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096060991 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096061945 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096079111 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096088886 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096088886 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096101999 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096111059 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096138000 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096205950 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096215963 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096225977 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096235991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096246004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096247911 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096261978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096266985 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096275091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096285105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096296072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096303940 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096304893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096317053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096328020 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096328974 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096338034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096347094 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096349001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096364975 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096364975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096376896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096381903 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096386909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096395969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096405983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096410990 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096425056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096436024 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096442938 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096447945 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096457958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096461058 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096467972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096478939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096483946 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096496105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096507072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096509933 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096518040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096527100 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096528053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096539974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096550941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096554995 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096581936 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096784115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096795082 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096808910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096818924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096827984 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096828938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096843958 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096857071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096867085 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096869946 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096877098 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096894026 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096898079 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096904993 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096914053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096925974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096936941 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096940041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096951008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.096951962 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096975088 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.096991062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097027063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097028017 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097238064 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097246885 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097279072 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097430944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097441912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097451925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097461939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097472906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097475052 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097485065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097491980 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097497940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097507954 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097510099 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097518921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097527981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097537041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097541094 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097548008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097557068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097568035 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097569942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097588062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097589016 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097604036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097620964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097621918 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097634077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097644091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097654104 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097655058 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097665071 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097672939 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097676992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097687006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097698927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097701073 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097707987 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097716093 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097719908 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097729921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097742081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097753048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097755909 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097770929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097781897 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097786903 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097793102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097804070 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097816944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097826958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097827911 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097836971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097847939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097847939 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097858906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097866058 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097868919 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097879887 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097886086 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097889900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097902060 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097907066 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097923994 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097930908 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097935915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097945929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097958088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097961903 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.097968102 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097979069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097990036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.097995996 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098001003 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098011971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098022938 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098026037 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098033905 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098045111 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098051071 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098056078 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098071098 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098083973 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098087072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098100901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098107100 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098112106 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098121881 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098123074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098134041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098145008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098150015 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098155975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098166943 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098176956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098177910 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098189116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098201036 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098201990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098212957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098218918 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098228931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098241091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098242044 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098259926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098270893 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098277092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098287106 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098293066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098298073 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098311901 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098320007 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098323107 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098334074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098345995 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098351002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098361969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098372936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098381996 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098385096 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098397017 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098402023 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098412037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098422050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098428011 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098432064 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098443031 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098443985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098457098 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098462105 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098469019 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098479986 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098495960 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098500013 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098506927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098516941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098524094 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098529100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098540068 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098550081 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098551035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098562002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098573923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098583937 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098587990 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098598957 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098602057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098618031 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098628998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098634958 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098639965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098649979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098661900 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098661900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098674059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098685980 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098686934 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098695040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098702908 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098704100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098715067 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098726034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098730087 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098737001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098750114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098757029 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098759890 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098771095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098782063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098784924 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098798990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098803043 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098809958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098819971 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098819971 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098831892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098841906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098851919 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098851919 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098861933 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098874092 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098877907 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098884106 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098895073 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098896980 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098906994 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098910093 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098917961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098927975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098929882 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098941088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098957062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098958969 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098968983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098978996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098984957 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098989010 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.098998070 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.098999977 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099010944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099020958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099029064 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099033117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099042892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099052906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099055052 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099065065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099067926 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099082947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099097013 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099098921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099108934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099118948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099124908 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099128008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099140882 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099152088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099155903 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099163055 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099174976 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099184036 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099185944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099196911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099208117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099217892 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099217892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099236012 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099245071 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099246025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099256992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099267006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099277973 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099287033 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099288940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099298954 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099304914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099311113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099327087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099339008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099350929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099350929 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099361897 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099374056 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099380016 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099385977 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099390984 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099396944 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099407911 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099419117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099428892 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099428892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099440098 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099448919 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099456072 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099468946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099473000 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099484921 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099493980 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099495888 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099507093 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099514008 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099524975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099534035 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099544048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099545002 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099555969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099560976 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099566936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099576950 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099587917 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099587917 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099600077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099611998 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099617958 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099622965 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099632978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099637032 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099642992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099653959 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099669933 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099673033 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099673033 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099679947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099690914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099699974 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099700928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099714994 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099725008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099729061 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099735975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099745035 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099745989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099756002 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099766970 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099775076 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099781036 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099791050 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099801064 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099802017 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099812031 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099818945 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099823952 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099833012 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099859953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099862099 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099870920 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099880934 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099893093 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.099915028 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099937916 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099963903 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.099999905 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100016117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100025892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100040913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100049973 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100052118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100063086 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100074053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100084066 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100084066 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100095034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100099087 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100106001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100117922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100127935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100132942 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100140095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100148916 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100172997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100176096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100183964 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100193977 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100204945 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100215912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100224972 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100236893 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100263119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100275040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100282907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100294113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100298882 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100305080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100316048 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100317001 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100327015 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100337029 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100342035 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100356102 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100398064 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100408077 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100418091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100429058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100435019 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100440979 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100451946 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100461960 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100462914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100471973 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100476027 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100506067 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100538015 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100548983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100558996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100569963 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100572109 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100580931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100590944 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100591898 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100604057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100613117 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100619078 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100629091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100641966 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100646019 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100651026 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100662947 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100663900 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100673914 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100684881 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100696087 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100697041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100708961 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100718975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100723028 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100723982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100740910 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100743055 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100753069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100764036 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100764990 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100775957 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100788116 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100795031 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100797892 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100811958 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100888014 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100902081 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100912094 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100924015 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100924969 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100934982 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100940943 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.100945950 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.100986004 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101032019 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101042032 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101052046 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101063013 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101069927 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101073980 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101084948 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101084948 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101116896 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101176023 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101186037 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101195097 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101207018 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101217985 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101217985 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101229906 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101236105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101248980 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101258039 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101260900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101272106 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101283073 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101285934 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101294041 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101304054 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101305008 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101316929 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101327896 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101337910 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101337910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101350069 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101358891 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101360083 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101376057 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101380110 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101391077 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101397991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101408005 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101417065 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101433992 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101437092 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101445913 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101449013 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101457119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101465940 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101480007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101488113 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101490974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101501942 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101511955 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101520061 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101522923 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101527929 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101533890 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101543903 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101551056 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101555109 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101566076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101566076 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101577044 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101587057 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101589918 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101598024 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101607084 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101636887 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101669073 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101680040 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101689100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101699114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101708889 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101710081 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101720095 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101731062 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101739883 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101742983 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101756096 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101783037 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101783991 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101794958 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101804972 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101816893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101820946 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101830006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101840973 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.101850033 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.101866007 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102044106 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102055073 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102063894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102075100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102085114 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102092981 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102097034 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102102041 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102109909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102121115 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102132082 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102138996 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102143049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102153063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102161884 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102164984 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102174044 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102175951 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102201939 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102289915 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102302074 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102312088 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102332115 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102341890 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102349997 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102363110 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102371931 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102384090 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102392912 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102394104 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102420092 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102474928 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102487087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102495909 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102509022 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102515936 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102519989 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102529049 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102531910 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102557898 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102621078 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102638006 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102648973 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102657080 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102660894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102672100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.102684975 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.102701902 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103007078 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103018045 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103027105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103037119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103048086 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103048086 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103070974 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103219032 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103229046 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103239059 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103249073 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103259087 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103260994 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103269100 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103271961 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103280067 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103291988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103300095 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103302956 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103318930 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103329897 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103332996 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103339911 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103349924 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103360891 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103368998 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103370905 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103390932 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103394985 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103403091 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103413105 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103424072 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103431940 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103435993 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103441000 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103446007 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103456020 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103466988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103477001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103482962 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103487968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103498936 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103498936 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103508949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103521109 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103528023 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103530884 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103542089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103554010 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103554964 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103564978 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103575945 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103612900 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103792906 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103809118 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103818893 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103828907 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103840113 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103843927 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103851080 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103856087 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103862047 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103873968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103883982 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103884935 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103894949 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103905916 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103918076 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103919029 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103928089 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103939056 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103944063 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103964090 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103965998 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103975058 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103986025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.103992939 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.103996038 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104007959 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104007959 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104020119 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104029894 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104032040 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104042053 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104053974 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104055882 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104063988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104070902 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104074001 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104085922 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104096889 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104104996 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104109049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104120016 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104130983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104130983 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104140997 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104142904 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104170084 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104193926 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104203939 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104213953 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104228973 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104234934 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104239941 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104250908 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104254961 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104259968 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104264975 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104269981 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104274988 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104274988 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104279995 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104289055 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104300022 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104317904 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104336023 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104357004 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104368925 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104398966 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104495049 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104506969 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104516983 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104530096 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104535103 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104540110 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104552031 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104562044 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104568005 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104573011 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104583025 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104593039 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104595900 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.104608059 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.104629993 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.127535105 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.127602100 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.249594927 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.249653101 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.249692917 CET	49731	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:25.254540920 CET	80	49731	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:25.750622034 CET	49732	443	192.168.2.4	107.189.1.198
Nov 3, 2024 09:41:25.750684977 CET	443	49732	107.189.1.198	192.168.2.4
Nov 3, 2024 09:41:25.750756979 CET	49732	443	192.168.2.4	107.189.1.198
Nov 3, 2024 09:41:25.750931978 CET	49732	443	192.168.2.4	107.189.1.198
Nov 3, 2024 09:41:25.750945091 CET	443	49732	107.189.1.198	192.168.2.4
Nov 3, 2024 09:41:27.344604969 CET	443	49732	107.189.1.198	192.168.2.4
Nov 3, 2024 09:41:27.344683886 CET	49732	443	192.168.2.4	107.189.1.198
Nov 3, 2024 09:41:27.349981070 CET	49732	443	192.168.2.4	107.189.1.198
Nov 3, 2024 09:41:27.349996090 CET	443	49732	107.189.1.198	192.168.2.4
Nov 3, 2024 09:41:27.350267887 CET	443	49732	107.189.1.198	192.168.2.4
Nov 3, 2024 09:41:27.354044914 CET	49732	443	192.168.2.4	107.189.1.198
Nov 3, 2024 09:41:27.395333052 CET	443	49732	107.189.1.198	192.168.2.4
Nov 3, 2024 09:41:27.929075956 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:27.934056044 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:27.934123993 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:27.934577942 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:27.939327955 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:28.967688084 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:28.973162889 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:28.978178978 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:29.272535086 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:29.275238037 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:29.280072927 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:29.573515892 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:29.573534012 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:29.573606014 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:29.573720932 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:29.574204922 CET	49734	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:29.578505039 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:29.579015017 CET	80	49734	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:29.579086065 CET	49734	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:29.579150915 CET	49734	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:29.583923101 CET	80	49734	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:30.627496004 CET	80	49734	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:30.627630949 CET	49734	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:30.627789021 CET	49734	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:30.628309965 CET	49735	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:30.632546902 CET	80	49734	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:30.633181095 CET	80	49735	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:30.633312941 CET	49735	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:30.633366108 CET	49735	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:30.638176918 CET	80	49735	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:31.671094894 CET	80	49735	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:31.671112061 CET	80	49735	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:31.671123981 CET	80	49735	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:31.671185017 CET	49735	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:31.819350958 CET	80	49735	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:31.819505930 CET	49735	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:31.819601059 CET	49735	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:31.820018053 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:31.824625015 CET	80	49735	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:31.824884892 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:32.118596077 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:32.120109081 CET	49736	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:32.124958992 CET	80	49736	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:32.125030994 CET	49736	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:32.125080109 CET	49736	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:32.129832029 CET	80	49736	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:32.163528919 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:32.884776115 CET	80	49736	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:32.884799957 CET	80	49736	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:32.884819031 CET	80	49736	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:32.884848118 CET	49736	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:32.892942905 CET	80	49736	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:32.893007040 CET	49736	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:32.909085989 CET	49736	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:32.910109997 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:32.914192915 CET	80	49736	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:32.915364981 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:33.228724003 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:33.233254910 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:33.238073111 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:33.548122883 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:33.548698902 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:33.553576946 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:33.856554985 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:33.857587099 CET	49737	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:33.862535954 CET	80	49737	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:33.862649918 CET	49737	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:33.862711906 CET	49737	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:33.867957115 CET	80	49737	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:33.897927999 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:34.613708973 CET	80	49737	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:34.613725901 CET	80	49737	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:34.613737106 CET	80	49737	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:34.613749027 CET	80	49737	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:34.613769054 CET	49737	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:34.613820076 CET	49737	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:34.621757030 CET	80	49737	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:34.621804953 CET	49737	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:34.621857882 CET	49737	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:34.622320890 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:34.626600027 CET	80	49737	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:34.627080917 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:35.065769911 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:35.066411972 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:35.071187019 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:35.509978056 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:35.510735035 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:35.515614033 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:35.974390030 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:36.027503967 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:36.139357090 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:36.139586926 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:36.144475937 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:36.144531012 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:36.149409056 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:36.442090988 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:36.443196058 CET	49739	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:36.448038101 CET	80	49739	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:36.448102951 CET	49739	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:36.448154926 CET	49739	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:36.452991009 CET	80	49739	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:36.488312960 CET	49740	443	192.168.2.4	195.128.102.56
Nov 3, 2024 09:41:36.488347054 CET	443	49740	195.128.102.56	192.168.2.4
Nov 3, 2024 09:41:36.488519907 CET	49740	443	192.168.2.4	195.128.102.56
Nov 3, 2024 09:41:36.488749027 CET	49740	443	192.168.2.4	195.128.102.56
Nov 3, 2024 09:41:36.488759041 CET	443	49740	195.128.102.56	192.168.2.4
Nov 3, 2024 09:41:36.491633892 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:37.488338947 CET	80	49739	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:37.488399029 CET	49739	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:37.488449097 CET	49739	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:37.488890886 CET	49742	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:37.493232012 CET	80	49739	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:37.493729115 CET	80	49742	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:37.493838072 CET	49742	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:37.493886948 CET	49742	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:37.498625994 CET	80	49742	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:37.878153086 CET	443	49740	195.128.102.56	192.168.2.4
Nov 3, 2024 09:41:37.878235102 CET	49740	443	192.168.2.4	195.128.102.56
Nov 3, 2024 09:41:37.879770041 CET	49740	443	192.168.2.4	195.128.102.56
Nov 3, 2024 09:41:37.879776955 CET	443	49740	195.128.102.56	192.168.2.4
Nov 3, 2024 09:41:37.879993916 CET	443	49740	195.128.102.56	192.168.2.4
Nov 3, 2024 09:41:37.882045031 CET	49740	443	192.168.2.4	195.128.102.56
Nov 3, 2024 09:41:37.927330971 CET	443	49740	195.128.102.56	192.168.2.4
Nov 3, 2024 09:41:38.262732029 CET	80	49742	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:38.265494108 CET	49742	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:38.265573978 CET	49742	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:38.265995026 CET	49744	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:38.270415068 CET	80	49742	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:38.270862103 CET	80	49744	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:38.270941973 CET	49744	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:38.271003008 CET	49744	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:38.275769949 CET	80	49744	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:39.332380056 CET	80	49744	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:39.332391977 CET	80	49744	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:39.332401991 CET	80	49744	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:39.332412958 CET	80	49744	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:39.332536936 CET	49744	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:39.485506058 CET	80	49744	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:39.485637903 CET	49744	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:39.485708952 CET	49744	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:39.486068964 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:39.490530968 CET	80	49744	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:39.490897894 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:40.431334019 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:40.431927919 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:40.436847925 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:40.826328039 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:40.826565027 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:40.831461906 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:41.227560997 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:41.227780104 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:41.232642889 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:41.232716084 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:41.237550974 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:41.533716917 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:41.534676075 CET	49748	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:41.539501905 CET	80	49748	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:41.539565086 CET	49748	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:41.540096998 CET	49748	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:41.544831991 CET	80	49748	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:41.585419893 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:43.047483921 CET	80	49748	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:43.047499895 CET	80	49748	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:43.047508001 CET	80	49748	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:43.047559023 CET	49748	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:43.101052046 CET	49748	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:43.199161053 CET	80	49748	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:43.199820995 CET	49748	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:43.199884892 CET	49748	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:43.200226068 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:43.204801083 CET	80	49748	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:43.205085993 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:43.563896894 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:43.564677954 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:43.569447994 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:43.884850025 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:43.885059118 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:43.889844894 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:44.194946051 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:44.195168018 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:44.200325966 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:44.200376987 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:44.206353903 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:44.503038883 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:44.504020929 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:44.508930922 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:44.509006023 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:44.509066105 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:44.513907909 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:44.554172039 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:45.573380947 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.573394060 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.573462009 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:45.574269056 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.574397087 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.574409962 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.574419975 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.574430943 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.574443102 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.574445963 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:45.574455023 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.574469090 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.574486971 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:45.574511051 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:45.578254938 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.578314066 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.578363895 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:45.723048925 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.728378057 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.728394032 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.728404999 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.728416920 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.728427887 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.728455067 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:45.728497982 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:45.728707075 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.772986889 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:45.883383036 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.883445024 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:45.883490086 CET	49749	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:45.883963108 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:45.888330936 CET	80	49749	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:45.888746023 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:46.237162113 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:46.237796068 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:46.242655993 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:46.579790115 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:46.580027103 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:46.584844112 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:46.965939999 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:46.966247082 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:46.971093893 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:46.971196890 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:46.975981951 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:47.269573927 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:47.270978928 CET	49750	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:47.275799036 CET	80	49750	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:47.275871992 CET	49750	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:47.275943041 CET	49750	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:47.280925035 CET	80	49750	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:47.319797993 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:48.318787098 CET	80	49750	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:48.318799973 CET	80	49750	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:48.318814993 CET	80	49750	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:48.318828106 CET	80	49750	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:48.318907976 CET	49750	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:48.318953037 CET	49750	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:48.467374086 CET	80	49750	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:48.467454910 CET	49750	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:48.467530966 CET	49750	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:48.467930079 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:48.473153114 CET	80	49750	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:48.473659992 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:48.782953978 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:48.783588886 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:48.788427114 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:49.115194082 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:49.115415096 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:49.120361090 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:49.433800936 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:49.434128046 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:49.438991070 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:49.439043045 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:49.443813086 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:49.737447023 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:49.738600969 CET	49751	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:49.743441105 CET	80	49751	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:49.743511915 CET	49751	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:49.743562937 CET	49751	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:49.748337030 CET	80	49751	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:49.788557053 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:50.804564953 CET	80	49751	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:50.804774046 CET	49751	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:50.804848909 CET	49751	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:50.805320978 CET	49752	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:50.809700012 CET	80	49751	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:50.810157061 CET	80	49752	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:50.810231924 CET	49752	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:50.810271978 CET	49752	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:50.815061092 CET	80	49752	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:51.871032000 CET	80	49752	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:51.871119976 CET	49752	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:51.871176004 CET	49752	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:51.871650934 CET	49753	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:51.876255989 CET	80	49752	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:51.876624107 CET	80	49753	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:51.876698971 CET	49753	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:51.876755953 CET	49753	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:51.881768942 CET	80	49753	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:52.931890965 CET	80	49753	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:52.931973934 CET	49753	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:52.932044983 CET	49753	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:41:52.932142973 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:52.933608055 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:52.936892986 CET	80	49753	193.23.244.244	192.168.2.4
Nov 3, 2024 09:41:52.937078953 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:52.938402891 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:52.938900948 CET	4825	49733	188.68.58.105	192.168.2.4
Nov 3, 2024 09:41:52.938977003 CET	49733	4825	192.168.2.4	188.68.58.105
Nov 3, 2024 09:41:57.352137089 CET	49754	9001	192.168.2.4	185.162.251.94
Nov 3, 2024 09:41:57.357130051 CET	9001	49754	185.162.251.94	192.168.2.4
Nov 3, 2024 09:41:57.357217073 CET	49754	9001	192.168.2.4	185.162.251.94
Nov 3, 2024 09:41:57.357481003 CET	49754	9001	192.168.2.4	185.162.251.94
Nov 3, 2024 09:41:57.362221956 CET	9001	49754	185.162.251.94	192.168.2.4
Nov 3, 2024 09:41:58.412987947 CET	9001	49754	185.162.251.94	192.168.2.4
Nov 3, 2024 09:41:58.416344881 CET	49754	9001	192.168.2.4	185.162.251.94
Nov 3, 2024 09:41:58.421418905 CET	9001	49754	185.162.251.94	192.168.2.4
Nov 3, 2024 09:41:58.719633102 CET	9001	49754	185.162.251.94	192.168.2.4
Nov 3, 2024 09:41:58.719988108 CET	49754	9001	192.168.2.4	185.162.251.94
Nov 3, 2024 09:41:58.724862099 CET	9001	49754	185.162.251.94	192.168.2.4
Nov 3, 2024 09:41:59.022882938 CET	9001	49754	185.162.251.94	192.168.2.4
Nov 3, 2024 09:41:59.022963047 CET	9001	49754	185.162.251.94	192.168.2.4
Nov 3, 2024 09:41:59.023029089 CET	49754	9001	192.168.2.4	185.162.251.94
Nov 3, 2024 09:41:59.023133039 CET	49754	9001	192.168.2.4	185.162.251.94
Nov 3, 2024 09:41:59.023708105 CET	49755	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:59.027905941 CET	9001	49754	185.162.251.94	192.168.2.4
Nov 3, 2024 09:41:59.028448105 CET	80	49755	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:59.028533936 CET	49755	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:59.040144920 CET	49755	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:59.044928074 CET	80	49755	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:59.798258066 CET	80	49755	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:59.798489094 CET	49755	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:59.798489094 CET	49755	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:41:59.799204111 CET	49756	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:59.804122925 CET	80	49755	216.218.219.41	192.168.2.4
Nov 3, 2024 09:41:59.804991961 CET	80	49756	45.66.35.11	192.168.2.4
Nov 3, 2024 09:41:59.805103064 CET	49756	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:59.805301905 CET	49756	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:41:59.810070038 CET	80	49756	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:00.846111059 CET	80	49756	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:00.846206903 CET	49756	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:00.846290112 CET	49756	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:00.846807957 CET	49757	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:00.851509094 CET	80	49756	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:00.852025986 CET	80	49757	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:00.852104902 CET	49757	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:00.852237940 CET	49757	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:00.857003927 CET	80	49757	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:01.919863939 CET	80	49757	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:01.919924021 CET	49757	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:01.923269033 CET	49757	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:01.927719116 CET	49754	9001	192.168.2.4	185.162.251.94
Nov 3, 2024 09:42:01.927764893 CET	49754	9001	192.168.2.4	185.162.251.94
Nov 3, 2024 09:42:01.927985907 CET	80	49757	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:01.932600021 CET	9001	49754	185.162.251.94	192.168.2.4
Nov 3, 2024 09:42:01.933057070 CET	9001	49754	185.162.251.94	192.168.2.4
Nov 3, 2024 09:42:01.933118105 CET	49754	9001	192.168.2.4	185.162.251.94
Nov 3, 2024 09:42:01.936804056 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:01.941854000 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:01.941927910 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:01.945560932 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:01.950462103 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:02.983280897 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:02.984884977 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:02.989746094 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:03.284312963 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:03.284713984 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:03.289598942 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:03.584045887 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:03.584117889 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:03.584172964 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:03.584542990 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:03.585387945 CET	49759	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:03.589337111 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:03.590224981 CET	80	49759	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:03.590291023 CET	49759	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:03.590379953 CET	49759	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:03.595125914 CET	80	49759	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:04.646707058 CET	80	49759	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:04.646770954 CET	49759	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:04.647597075 CET	49759	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:04.648171902 CET	49760	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:04.652473927 CET	80	49759	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:04.652995110 CET	80	49760	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:04.653057098 CET	49760	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:04.654105902 CET	49760	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:04.658941984 CET	80	49760	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:05.414227962 CET	80	49760	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:05.414417982 CET	49760	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:05.414417982 CET	49760	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:05.414784908 CET	49761	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:05.419280052 CET	80	49760	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:05.419547081 CET	80	49761	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:05.419608116 CET	49761	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:05.419658899 CET	49761	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:05.424464941 CET	80	49761	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:06.517139912 CET	80	49761	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:06.517218113 CET	80	49761	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:06.517365932 CET	49761	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:06.666960955 CET	80	49761	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:06.667032957 CET	49761	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:06.667093039 CET	49761	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:06.667529106 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:06.671852112 CET	80	49761	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:06.672287941 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:06.971339941 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:06.974117994 CET	49762	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:06.979063988 CET	80	49762	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:06.979140043 CET	49762	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:06.979283094 CET	49762	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:06.984328985 CET	80	49762	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:07.022991896 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:07.884738922 CET	49763	9001	192.168.2.4	79.210.207.14
Nov 3, 2024 09:42:07.889719963 CET	9001	49763	79.210.207.14	192.168.2.4
Nov 3, 2024 09:42:07.889782906 CET	49763	9001	192.168.2.4	79.210.207.14
Nov 3, 2024 09:42:07.890007973 CET	49763	9001	192.168.2.4	79.210.207.14
Nov 3, 2024 09:42:07.894834042 CET	9001	49763	79.210.207.14	192.168.2.4
Nov 3, 2024 09:42:08.041261911 CET	80	49762	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:08.041325092 CET	49762	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:08.041379929 CET	49762	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:08.041836977 CET	49764	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:08.046184063 CET	80	49762	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:08.046626091 CET	80	49764	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:08.046681881 CET	49764	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:08.046730042 CET	49764	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:08.051496029 CET	80	49764	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:08.969604969 CET	9001	49763	79.210.207.14	192.168.2.4
Nov 3, 2024 09:42:08.971232891 CET	49763	9001	192.168.2.4	79.210.207.14
Nov 3, 2024 09:42:08.976202965 CET	9001	49763	79.210.207.14	192.168.2.4
Nov 3, 2024 09:42:09.134157896 CET	80	49764	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:09.134231091 CET	49764	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:09.134291887 CET	49764	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:09.134768009 CET	49765	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:09.139175892 CET	80	49764	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:09.139697075 CET	80	49765	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:09.139760017 CET	49765	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:09.139817953 CET	49765	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:09.144690990 CET	80	49765	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:09.285873890 CET	9001	49763	79.210.207.14	192.168.2.4
Nov 3, 2024 09:42:09.286274910 CET	49763	9001	192.168.2.4	79.210.207.14
Nov 3, 2024 09:42:09.291121006 CET	9001	49763	79.210.207.14	192.168.2.4
Nov 3, 2024 09:42:09.602051973 CET	9001	49763	79.210.207.14	192.168.2.4
Nov 3, 2024 09:42:09.602066994 CET	9001	49763	79.210.207.14	192.168.2.4
Nov 3, 2024 09:42:09.602128029 CET	49763	9001	192.168.2.4	79.210.207.14
Nov 3, 2024 09:42:09.602235079 CET	49763	9001	192.168.2.4	79.210.207.14
Nov 3, 2024 09:42:09.602760077 CET	49766	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:09.607106924 CET	9001	49763	79.210.207.14	192.168.2.4
Nov 3, 2024 09:42:09.607649088 CET	80	49766	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:09.607703924 CET	49766	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:09.607781887 CET	49766	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:09.612550974 CET	80	49766	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:10.197892904 CET	80	49765	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:10.197958946 CET	49765	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:10.198026896 CET	49765	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:10.198363066 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:10.198870897 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:10.199748039 CET	49767	9004	192.168.2.4	65.21.172.133
Nov 3, 2024 09:42:10.202825069 CET	80	49765	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:10.203164101 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:10.204109907 CET	9001	49758	46.23.108.195	192.168.2.4
Nov 3, 2024 09:42:10.204158068 CET	49758	9001	192.168.2.4	46.23.108.195
Nov 3, 2024 09:42:10.204545021 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:10.204619884 CET	49767	9004	192.168.2.4	65.21.172.133
Nov 3, 2024 09:42:10.204828024 CET	49767	9004	192.168.2.4	65.21.172.133
Nov 3, 2024 09:42:10.209669113 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:10.693236113 CET	80	49766	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:10.693301916 CET	49766	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:10.693392992 CET	49766	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:10.693937063 CET	49768	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:10.698209047 CET	80	49766	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:10.698848963 CET	80	49768	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:10.698916912 CET	49768	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:10.698968887 CET	49768	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:10.703864098 CET	80	49768	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:11.285393000 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:11.286870956 CET	49767	9004	192.168.2.4	65.21.172.133
Nov 3, 2024 09:42:11.291759014 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:11.608474970 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:11.608931065 CET	49767	9004	192.168.2.4	65.21.172.133
Nov 3, 2024 09:42:11.613804102 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:11.740607977 CET	80	49768	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:11.740691900 CET	49768	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:11.740868092 CET	49768	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:11.741290092 CET	49769	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:11.745657921 CET	80	49768	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:11.746084929 CET	80	49769	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:11.746157885 CET	49769	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:11.746217012 CET	49769	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:11.751344919 CET	80	49769	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:11.930073977 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:11.930087090 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:11.930098057 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:11.930176020 CET	49767	9004	192.168.2.4	65.21.172.133
Nov 3, 2024 09:42:11.930315971 CET	49767	9004	192.168.2.4	65.21.172.133
Nov 3, 2024 09:42:11.930823088 CET	49770	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:11.935075045 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:11.935630083 CET	80	49770	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:11.935695887 CET	49770	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:11.935818911 CET	49770	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:11.940985918 CET	80	49770	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:12.791135073 CET	80	49769	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:12.791341066 CET	49769	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:12.791399956 CET	49769	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:12.791908979 CET	49763	9001	192.168.2.4	79.210.207.14
Nov 3, 2024 09:42:12.791929960 CET	49763	9001	192.168.2.4	79.210.207.14
Nov 3, 2024 09:42:12.792490005 CET	49771	443	192.168.2.4	204.8.96.71
Nov 3, 2024 09:42:12.792507887 CET	443	49771	204.8.96.71	192.168.2.4
Nov 3, 2024 09:42:12.792578936 CET	49771	443	192.168.2.4	204.8.96.71
Nov 3, 2024 09:42:12.793108940 CET	49771	443	192.168.2.4	204.8.96.71
Nov 3, 2024 09:42:12.793118000 CET	443	49771	204.8.96.71	192.168.2.4
Nov 3, 2024 09:42:12.796174049 CET	80	49769	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:12.796650887 CET	9001	49763	79.210.207.14	192.168.2.4
Nov 3, 2024 09:42:12.797082901 CET	9001	49763	79.210.207.14	192.168.2.4
Nov 3, 2024 09:42:12.797135115 CET	49763	9001	192.168.2.4	79.210.207.14
Nov 3, 2024 09:42:13.185955048 CET	80	49770	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:13.185971022 CET	80	49770	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:13.185982943 CET	80	49770	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:13.186031103 CET	49770	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:13.195451975 CET	80	49770	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:13.195502043 CET	49770	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:13.195552111 CET	49770	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:13.195921898 CET	49767	9004	192.168.2.4	65.21.172.133
Nov 3, 2024 09:42:13.200345039 CET	80	49770	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:13.200743914 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:13.519634962 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:13.520823956 CET	49767	9004	192.168.2.4	65.21.172.133
Nov 3, 2024 09:42:13.521336079 CET	49767	9004	192.168.2.4	65.21.172.133
Nov 3, 2024 09:42:13.525660992 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:13.526516914 CET	9004	49767	65.21.172.133	192.168.2.4
Nov 3, 2024 09:42:13.526591063 CET	49767	9004	192.168.2.4	65.21.172.133
Nov 3, 2024 09:42:13.806252956 CET	443	49771	204.8.96.71	192.168.2.4
Nov 3, 2024 09:42:13.806344032 CET	49771	443	192.168.2.4	204.8.96.71
Nov 3, 2024 09:42:13.808175087 CET	49771	443	192.168.2.4	204.8.96.71
Nov 3, 2024 09:42:13.808180094 CET	443	49771	204.8.96.71	192.168.2.4
Nov 3, 2024 09:42:13.808418989 CET	443	49771	204.8.96.71	192.168.2.4
Nov 3, 2024 09:42:13.808723927 CET	49771	443	192.168.2.4	204.8.96.71
Nov 3, 2024 09:42:13.851341963 CET	443	49771	204.8.96.71	192.168.2.4
Nov 3, 2024 09:42:22.945759058 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:22.950783014 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:22.950853109 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:22.951005936 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:22.955780029 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:27.072679996 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:27.074163914 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:27.080828905 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:27.416090012 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:27.416481972 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:27.421382904 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:28.762973070 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:28.762990952 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:28.763181925 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:28.763261080 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:28.763742924 CET	49829	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:28.768011093 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:28.768533945 CET	80	49829	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:28.768609047 CET	49829	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:28.768656969 CET	49829	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:28.773425102 CET	80	49829	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:29.811069012 CET	80	49829	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:29.811089039 CET	80	49829	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:29.811100006 CET	80	49829	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:29.811187983 CET	49829	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:29.961112976 CET	80	49829	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:29.961236954 CET	49829	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:29.961299896 CET	49829	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:29.961659908 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:29.966170073 CET	80	49829	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:29.966468096 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:30.307651997 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:30.308806896 CET	49836	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:30.315790892 CET	80	49836	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:30.315879107 CET	49836	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:30.315917969 CET	49836	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:30.320884943 CET	80	49836	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:30.351125956 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:31.374058962 CET	80	49836	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:31.374145985 CET	49836	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:31.374748945 CET	49842	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:31.374751091 CET	49836	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:31.379564047 CET	80	49836	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:31.379575968 CET	80	49842	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:31.379652977 CET	49842	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:31.379690886 CET	49842	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:31.384452105 CET	80	49842	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:32.140506029 CET	80	49842	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:32.140583038 CET	80	49842	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:32.140595913 CET	80	49842	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:32.140608072 CET	80	49842	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:32.140620947 CET	80	49842	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:32.140635967 CET	80	49842	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:32.140647888 CET	80	49842	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:32.140660048 CET	49842	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:32.140707970 CET	49842	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:32.148772955 CET	80	49842	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:32.148829937 CET	49842	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:32.148878098 CET	49842	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:32.149380922 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:32.153738022 CET	80	49842	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:32.154146910 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:33.227346897 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:33.228622913 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:33.233474970 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:34.747842073 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:34.748228073 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:34.754226923 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:35.959675074 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:35.960429907 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:35.965255976 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:39.356683016 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:39.357325077 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:39.362251997 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:42.418495893 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:42.427660942 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:42.432574034 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:43.523884058 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:43.700788021 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:43.701577902 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:43.701791048 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:43.821012020 CET	49895	9000	192.168.2.4	2.58.56.35
Nov 3, 2024 09:42:43.926465034 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:43.926506996 CET	9000	49895	2.58.56.35	192.168.2.4
Nov 3, 2024 09:42:43.926582098 CET	49895	9000	192.168.2.4	2.58.56.35
Nov 3, 2024 09:42:43.926770926 CET	49895	9000	192.168.2.4	2.58.56.35
Nov 3, 2024 09:42:43.931808949 CET	9000	49895	2.58.56.35	192.168.2.4
Nov 3, 2024 09:42:44.222274065 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:44.223730087 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:44.228657007 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:44.228723049 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:44.233592987 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:44.981867075 CET	9000	49895	2.58.56.35	192.168.2.4
Nov 3, 2024 09:42:44.983211040 CET	49895	9000	192.168.2.4	2.58.56.35
Nov 3, 2024 09:42:44.988610029 CET	9000	49895	2.58.56.35	192.168.2.4
Nov 3, 2024 09:42:45.055577993 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:45.071047068 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:45.075992107 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:45.286791086 CET	9000	49895	2.58.56.35	192.168.2.4
Nov 3, 2024 09:42:45.287940979 CET	49895	9000	192.168.2.4	2.58.56.35
Nov 3, 2024 09:42:45.292898893 CET	9000	49895	2.58.56.35	192.168.2.4
Nov 3, 2024 09:42:45.553553104 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:45.554527998 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:45.559530020 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:45.592830896 CET	9000	49895	2.58.56.35	192.168.2.4
Nov 3, 2024 09:42:45.592974901 CET	9000	49895	2.58.56.35	192.168.2.4
Nov 3, 2024 09:42:45.593034983 CET	49895	9000	192.168.2.4	2.58.56.35
Nov 3, 2024 09:42:45.593128920 CET	49895	9000	192.168.2.4	2.58.56.35
Nov 3, 2024 09:42:45.593569994 CET	49903	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:45.598026991 CET	9000	49895	2.58.56.35	192.168.2.4
Nov 3, 2024 09:42:45.598357916 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:45.598414898 CET	49903	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:45.598459005 CET	49903	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:45.603359938 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:45.904939890 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:45.905437946 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:45.910335064 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:46.262449026 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:46.262468100 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:46.262537003 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:46.262676001 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:46.263163090 CET	49907	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:46.267563105 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:46.268008947 CET	80	49907	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:46.268071890 CET	49907	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:46.268126011 CET	49907	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:46.272849083 CET	80	49907	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:46.379067898 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:46.379708052 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:46.384470940 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:46.674546957 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.674572945 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.674586058 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.674633980 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.674645901 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.674644947 CET	49903	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:46.674655914 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.674668074 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.674705982 CET	49903	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:46.675239086 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.675250053 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.675261974 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.675292969 CET	49903	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:46.675369024 CET	49903	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:46.679596901 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.679609060 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.679649115 CET	49903	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:46.825159073 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.825249910 CET	49903	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:46.825283051 CET	49903	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:42:46.825834990 CET	49895	9000	192.168.2.4	2.58.56.35
Nov 3, 2024 09:42:46.825861931 CET	49895	9000	192.168.2.4	2.58.56.35
Nov 3, 2024 09:42:46.826348066 CET	49910	9001	192.168.2.4	167.235.112.134
Nov 3, 2024 09:42:46.832851887 CET	80	49903	193.23.244.244	192.168.2.4
Nov 3, 2024 09:42:46.832863092 CET	9000	49895	2.58.56.35	192.168.2.4
Nov 3, 2024 09:42:46.832870960 CET	9000	49895	2.58.56.35	192.168.2.4
Nov 3, 2024 09:42:46.832881927 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:46.832933903 CET	49895	9000	192.168.2.4	2.58.56.35
Nov 3, 2024 09:42:46.832957983 CET	49910	9001	192.168.2.4	167.235.112.134
Nov 3, 2024 09:42:46.833096981 CET	49910	9001	192.168.2.4	167.235.112.134
Nov 3, 2024 09:42:46.837888002 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:47.318397045 CET	80	49907	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:47.318435907 CET	80	49907	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:47.318448067 CET	80	49907	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:47.318559885 CET	49907	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:47.464123964 CET	80	49907	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:47.464207888 CET	49907	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:47.464271069 CET	49907	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:47.464626074 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:47.469129086 CET	80	49907	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:47.469482899 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:47.605724096 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:47.605933905 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:47.610891104 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:47.893542051 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:47.894841909 CET	49910	9001	192.168.2.4	167.235.112.134
Nov 3, 2024 09:42:47.899904966 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:48.202112913 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:48.202454090 CET	49910	9001	192.168.2.4	167.235.112.134
Nov 3, 2024 09:42:48.207443953 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:48.297039986 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:48.298250914 CET	49917	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:48.303132057 CET	80	49917	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:48.303320885 CET	49917	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:48.303420067 CET	49917	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:48.308218956 CET	80	49917	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:48.351180077 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:48.508518934 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:48.508538961 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:48.508621931 CET	49910	9001	192.168.2.4	167.235.112.134
Nov 3, 2024 09:42:48.508712053 CET	49910	9001	192.168.2.4	167.235.112.134
Nov 3, 2024 09:42:48.509130001 CET	49920	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:48.513631105 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:48.513999939 CET	80	49920	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:48.514070988 CET	49920	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:48.514169931 CET	49920	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:48.518986940 CET	80	49920	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:48.779803991 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:48.779993057 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:48.784888983 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:48.784940958 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:48.789844990 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:49.347894907 CET	80	49917	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:49.347979069 CET	49917	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:49.348066092 CET	49917	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:49.348572016 CET	49924	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:49.352880001 CET	80	49917	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:49.353872061 CET	80	49924	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:49.353943110 CET	49924	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:49.354000092 CET	49924	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:49.358906984 CET	80	49924	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:49.559973955 CET	80	49920	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:49.560033083 CET	80	49920	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:49.560048103 CET	80	49920	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:49.560081959 CET	49920	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:49.601177931 CET	49920	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:49.710053921 CET	80	49920	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:49.710112095 CET	49920	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:49.710161924 CET	49920	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:49.710602045 CET	49910	9001	192.168.2.4	167.235.112.134
Nov 3, 2024 09:42:49.715159893 CET	80	49920	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:49.715405941 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:50.055588007 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:50.056534052 CET	49910	9001	192.168.2.4	167.235.112.134
Nov 3, 2024 09:42:50.056699991 CET	49910	9001	192.168.2.4	167.235.112.134
Nov 3, 2024 09:42:50.061592102 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:50.062148094 CET	9001	49910	167.235.112.134	192.168.2.4
Nov 3, 2024 09:42:50.062197924 CET	49910	9001	192.168.2.4	167.235.112.134
Nov 3, 2024 09:42:50.408493042 CET	80	49924	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:50.408659935 CET	80	49924	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:50.408673048 CET	80	49924	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:50.408684969 CET	80	49924	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:50.408696890 CET	80	49924	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:50.408716917 CET	49924	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:50.408768892 CET	49924	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:50.560955048 CET	80	49924	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:50.561013937 CET	49924	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:50.561059952 CET	49924	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:42:50.561505079 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:50.565800905 CET	80	49924	45.66.35.11	192.168.2.4
Nov 3, 2024 09:42:50.566294909 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:50.894160986 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:50.894973993 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:50.899790049 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:51.278115988 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:51.278698921 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:51.283756971 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:51.765912056 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:51.766701937 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:51.771614075 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:52.086281061 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:52.086519003 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:52.091389894 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:52.482108116 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:52.523173094 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:52.615159988 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:52.615793943 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:52.620682955 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:52.956304073 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:52.957458019 CET	49942	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:52.962344885 CET	80	49942	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:52.962399960 CET	49942	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:52.962477922 CET	49942	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:52.967252016 CET	80	49942	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:53.007451057 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:53.104347944 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:53.104547977 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:53.109349966 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:53.109402895 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:53.114269972 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:53.458523989 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:53.459307909 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:53.464167118 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:54.762984991 CET	80	49942	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:54.763000965 CET	80	49942	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:54.763012886 CET	80	49942	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:54.763042927 CET	49942	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:54.763106108 CET	80	49942	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:54.763154984 CET	49942	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:54.771389961 CET	80	49942	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:54.771435022 CET	49942	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:54.771476984 CET	49942	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:42:54.771868944 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:54.776364088 CET	80	49942	216.218.219.41	192.168.2.4
Nov 3, 2024 09:42:54.776721001 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:57.862765074 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:57.863357067 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:57.868318081 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:58.650662899 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:58.650895119 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:58.656333923 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:59.876080990 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:59.876287937 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:59.881175995 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:42:59.881232977 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:42:59.886074066 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:00.463064909 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:00.463982105 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:00.468808889 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:01.083110094 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:01.083830118 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:01.088859081 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:01.144033909 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:01.144642115 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:01.149542093 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:01.477075100 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:01.477423906 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:01.482289076 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:01.672790051 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:01.673042059 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:01.677908897 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:01.866262913 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:01.913708925 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:02.160058975 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:02.210679054 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:02.642488003 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:02.642894030 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:02.647672892 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:02.647726059 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:02.652519941 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:03.171505928 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:03.177376032 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:03.182324886 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:03.182406902 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:03.187437057 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:03.570053101 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:03.570588112 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:03.570890903 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:03.575517893 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:03.575869083 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:03.577155113 CET	9007	49799	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:03.577205896 CET	49799	9007	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:03.752873898 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:03.753890038 CET	49990	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:03.758841991 CET	80	49990	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:03.758912086 CET	49990	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:03.758982897 CET	49990	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:03.763922930 CET	80	49990	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:03.804425001 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:04.843741894 CET	80	49990	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:04.843807936 CET	49990	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:04.843857050 CET	49990	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:04.844393015 CET	49996	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:04.848659992 CET	80	49990	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:04.849164009 CET	80	49996	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:04.849231958 CET	49996	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:04.849297047 CET	49996	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:04.854075909 CET	80	49996	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:05.612211943 CET	80	49996	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:05.612277031 CET	49996	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:05.612481117 CET	49996	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:05.612761021 CET	49999	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:05.617185116 CET	80	49996	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:05.617554903 CET	80	49999	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:05.617619991 CET	49999	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:05.617691994 CET	49999	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:05.622445107 CET	80	49999	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:06.395343065 CET	80	49999	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:06.395416975 CET	49999	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:06.395468950 CET	49999	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:06.395546913 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:06.400312901 CET	80	49999	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:06.400326014 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:06.400394917 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:06.405734062 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:07.394880056 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:07.395859003 CET	50010	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:07.400719881 CET	80	50010	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:07.400887012 CET	50010	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:07.400887012 CET	50010	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:07.405668020 CET	80	50010	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:07.445070982 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:08.451747894 CET	80	50010	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:08.451919079 CET	50010	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:08.466532946 CET	50010	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:08.470523119 CET	50014	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:08.471360922 CET	80	50010	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:08.475513935 CET	80	50014	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:08.475565910 CET	50014	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:08.478589058 CET	50014	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:08.483516932 CET	80	50014	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:09.241256952 CET	80	50014	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:09.241271019 CET	80	50014	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:09.241281986 CET	80	50014	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:09.241314888 CET	50014	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:09.249214888 CET	80	50014	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:09.249299049 CET	50014	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:09.249349117 CET	50014	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:09.249685049 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:09.254182100 CET	80	50014	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:09.254483938 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:10.148791075 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:10.149386883 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:10.154202938 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:11.461873055 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:11.462086916 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:11.467032909 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:11.853728056 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:11.854026079 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:11.858921051 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:11.858977079 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:11.863847971 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:12.786544085 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:12.787475109 CET	50035	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:12.792345047 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:12.792403936 CET	50035	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:12.792457104 CET	50035	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:12.797234058 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:12.835786104 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:13.840786934 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.840929985 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.840950012 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.840962887 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.840974092 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.840976000 CET	50035	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:13.840990067 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.841001034 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.841012955 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.841013908 CET	50035	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:13.841025114 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.841028929 CET	50035	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:13.841037035 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.841067076 CET	50035	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:13.841077089 CET	50035	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:13.845925093 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.898116112 CET	50035	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:13.986659050 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.986727953 CET	50035	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:13.986785889 CET	50035	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:13.986994028 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:13.991975069 CET	80	50035	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:13.992227077 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:13.992352009 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:13.997288942 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:14.586107016 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:14.587083101 CET	50042	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:14.591964006 CET	80	50042	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:14.592040062 CET	50042	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:14.592084885 CET	50042	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:14.596894979 CET	80	50042	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:14.632504940 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:15.654833078 CET	80	50042	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:15.654984951 CET	50042	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:15.655030012 CET	50042	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:15.655461073 CET	50048	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:15.659894943 CET	80	50042	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:15.660305977 CET	80	50048	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:15.660371065 CET	50048	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:15.660425901 CET	50048	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:15.665369034 CET	80	50048	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:16.712668896 CET	80	50048	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:16.712766886 CET	50048	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:16.712821960 CET	50048	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:16.713272095 CET	50053	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:16.717664003 CET	80	50048	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:16.718122005 CET	80	50053	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:16.718184948 CET	50053	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:16.718267918 CET	50053	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:16.723104000 CET	80	50053	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:17.783030987 CET	80	50053	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:17.783097982 CET	50053	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:17.783129930 CET	50053	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:17.783200026 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:17.787986994 CET	80	50053	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:17.788007021 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:17.788100004 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:17.792939901 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:18.130873919 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:18.131874084 CET	50060	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:18.136785030 CET	80	50060	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:18.136854887 CET	50060	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:18.136898994 CET	50060	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:18.141716957 CET	80	50060	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:18.179364920 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:18.894957066 CET	80	50060	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:18.895142078 CET	50060	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:18.895199060 CET	50060	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:18.895663023 CET	50061	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:18.899935961 CET	80	50060	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:18.900430918 CET	80	50061	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:18.900494099 CET	50061	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:18.900542021 CET	50061	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:18.905356884 CET	80	50061	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:19.950902939 CET	80	50061	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:19.950920105 CET	80	50061	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:19.950977087 CET	50061	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:20.070935965 CET	50062	9090	192.168.2.4	129.150.32.113
Nov 3, 2024 09:43:20.075848103 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:20.075915098 CET	50062	9090	192.168.2.4	129.150.32.113
Nov 3, 2024 09:43:20.076100111 CET	50062	9090	192.168.2.4	129.150.32.113
Nov 3, 2024 09:43:20.080821991 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:20.096467972 CET	80	50061	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:20.096539974 CET	50061	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:20.096566916 CET	50061	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:20.096899986 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:20.101661921 CET	80	50061	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:20.101836920 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:20.499259949 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:20.499943972 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:20.504920959 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:21.154953003 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:21.155168056 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:21.160149097 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:21.185993910 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:21.187375069 CET	50062	9090	192.168.2.4	129.150.32.113
Nov 3, 2024 09:43:21.192174911 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:21.520438910 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:21.520909071 CET	50062	9090	192.168.2.4	129.150.32.113
Nov 3, 2024 09:43:21.525746107 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:21.558394909 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:21.601372004 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:22.000685930 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:22.000864029 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:22.000878096 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:22.000889063 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:22.000900030 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:22.000936031 CET	50062	9090	192.168.2.4	129.150.32.113
Nov 3, 2024 09:43:22.001142979 CET	50062	9090	192.168.2.4	129.150.32.113
Nov 3, 2024 09:43:22.001569033 CET	50063	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:22.001766920 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:22.005703926 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:22.005880117 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:22.006340981 CET	80	50063	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:22.006407976 CET	50063	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:22.006494045 CET	50063	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:22.006555080 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:22.007518053 CET	9005	49893	45.141.215.116	192.168.2.4
Nov 3, 2024 09:43:22.007566929 CET	49893	9005	192.168.2.4	45.141.215.116
Nov 3, 2024 09:43:22.011255026 CET	80	50063	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:22.780349016 CET	80	50063	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:22.780941010 CET	50063	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:22.780996084 CET	50063	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:22.781429052 CET	50064	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:22.785805941 CET	80	50063	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:22.786376953 CET	80	50064	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:22.786470890 CET	50064	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:22.786525011 CET	50064	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:22.791296005 CET	80	50064	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:23.854438066 CET	80	50064	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:23.854515076 CET	50064	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:23.854553938 CET	50064	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:23.855004072 CET	50065	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:23.859374046 CET	80	50064	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:23.859765053 CET	80	50065	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:23.859831095 CET	50065	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:23.859899998 CET	50065	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:23.864762068 CET	80	50065	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:24.631386995 CET	80	50065	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:24.631515980 CET	50065	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:24.631609917 CET	50065	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:24.632122040 CET	50062	9090	192.168.2.4	129.150.32.113
Nov 3, 2024 09:43:24.632145882 CET	50062	9090	192.168.2.4	129.150.32.113
Nov 3, 2024 09:43:24.632766008 CET	50066	443	192.168.2.4	139.162.11.98
Nov 3, 2024 09:43:24.632791996 CET	443	50066	139.162.11.98	192.168.2.4
Nov 3, 2024 09:43:24.632900000 CET	50066	443	192.168.2.4	139.162.11.98
Nov 3, 2024 09:43:24.633034945 CET	50066	443	192.168.2.4	139.162.11.98
Nov 3, 2024 09:43:24.633045912 CET	443	50066	139.162.11.98	192.168.2.4
Nov 3, 2024 09:43:24.636559010 CET	80	50065	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:24.637032032 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:24.637656927 CET	9090	50062	129.150.32.113	192.168.2.4
Nov 3, 2024 09:43:24.637711048 CET	50062	9090	192.168.2.4	129.150.32.113
Nov 3, 2024 09:43:26.119962931 CET	443	50066	139.162.11.98	192.168.2.4
Nov 3, 2024 09:43:26.120022058 CET	50066	443	192.168.2.4	139.162.11.98
Nov 3, 2024 09:43:26.125035048 CET	50066	443	192.168.2.4	139.162.11.98
Nov 3, 2024 09:43:26.125042915 CET	443	50066	139.162.11.98	192.168.2.4
Nov 3, 2024 09:43:26.125461102 CET	443	50066	139.162.11.98	192.168.2.4
Nov 3, 2024 09:43:26.125920057 CET	50066	443	192.168.2.4	139.162.11.98
Nov 3, 2024 09:43:26.167334080 CET	443	50066	139.162.11.98	192.168.2.4
Nov 3, 2024 09:43:33.586509943 CET	50067	48912	192.168.2.4	188.213.92.88
Nov 3, 2024 09:43:33.592114925 CET	48912	50067	188.213.92.88	192.168.2.4
Nov 3, 2024 09:43:33.592227936 CET	50067	48912	192.168.2.4	188.213.92.88
Nov 3, 2024 09:43:33.592797041 CET	50067	48912	192.168.2.4	188.213.92.88
Nov 3, 2024 09:43:33.597682953 CET	48912	50067	188.213.92.88	192.168.2.4
Nov 3, 2024 09:43:34.685225964 CET	48912	50067	188.213.92.88	192.168.2.4
Nov 3, 2024 09:43:34.686566114 CET	50067	48912	192.168.2.4	188.213.92.88
Nov 3, 2024 09:43:34.691435099 CET	48912	50067	188.213.92.88	192.168.2.4
Nov 3, 2024 09:43:34.987868071 CET	48912	50067	188.213.92.88	192.168.2.4
Nov 3, 2024 09:43:34.988356113 CET	50067	48912	192.168.2.4	188.213.92.88
Nov 3, 2024 09:43:34.993288040 CET	48912	50067	188.213.92.88	192.168.2.4
Nov 3, 2024 09:43:35.286333084 CET	48912	50067	188.213.92.88	192.168.2.4
Nov 3, 2024 09:43:35.286379099 CET	48912	50067	188.213.92.88	192.168.2.4
Nov 3, 2024 09:43:35.286449909 CET	50067	48912	192.168.2.4	188.213.92.88
Nov 3, 2024 09:43:35.286561012 CET	50067	48912	192.168.2.4	188.213.92.88
Nov 3, 2024 09:43:35.286987066 CET	50068	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:35.291357994 CET	48912	50067	188.213.92.88	192.168.2.4
Nov 3, 2024 09:43:35.291805983 CET	80	50068	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:35.291877031 CET	50068	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:35.291920900 CET	50068	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:35.296746969 CET	80	50068	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:36.339432955 CET	80	50068	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:36.339498043 CET	50068	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:36.339553118 CET	50068	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:36.340040922 CET	50069	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:36.344374895 CET	80	50068	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:36.344814062 CET	80	50069	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:36.344897985 CET	50069	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:36.344949007 CET	50069	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:36.349721909 CET	80	50069	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:37.405333996 CET	80	50069	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:37.405406952 CET	50069	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:37.405503035 CET	50069	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:37.405997992 CET	50070	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:37.410352945 CET	80	50069	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:37.410887957 CET	80	50070	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:37.410969019 CET	50070	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:37.411000013 CET	50070	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:37.415936947 CET	80	50070	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:38.453142881 CET	80	50070	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:38.453234911 CET	50070	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:38.453294039 CET	50070	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:38.453785896 CET	50067	48912	192.168.2.4	188.213.92.88
Nov 3, 2024 09:43:38.453819036 CET	50067	48912	192.168.2.4	188.213.92.88
Nov 3, 2024 09:43:38.454349995 CET	50071	443	192.168.2.4	154.213.185.183
Nov 3, 2024 09:43:38.454392910 CET	443	50071	154.213.185.183	192.168.2.4
Nov 3, 2024 09:43:38.454466105 CET	50071	443	192.168.2.4	154.213.185.183
Nov 3, 2024 09:43:38.454593897 CET	50071	443	192.168.2.4	154.213.185.183
Nov 3, 2024 09:43:38.454612970 CET	443	50071	154.213.185.183	192.168.2.4
Nov 3, 2024 09:43:38.458096981 CET	80	50070	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:38.458739042 CET	48912	50067	188.213.92.88	192.168.2.4
Nov 3, 2024 09:43:38.458978891 CET	48912	50067	188.213.92.88	192.168.2.4
Nov 3, 2024 09:43:38.459027052 CET	50067	48912	192.168.2.4	188.213.92.88
Nov 3, 2024 09:43:39.801917076 CET	443	50071	154.213.185.183	192.168.2.4
Nov 3, 2024 09:43:39.802015066 CET	50071	443	192.168.2.4	154.213.185.183
Nov 3, 2024 09:43:39.805124044 CET	50071	443	192.168.2.4	154.213.185.183
Nov 3, 2024 09:43:39.805140972 CET	443	50071	154.213.185.183	192.168.2.4
Nov 3, 2024 09:43:39.805347919 CET	443	50071	154.213.185.183	192.168.2.4
Nov 3, 2024 09:43:39.805635929 CET	50071	443	192.168.2.4	154.213.185.183
Nov 3, 2024 09:43:39.847337008 CET	443	50071	154.213.185.183	192.168.2.4
Nov 3, 2024 09:43:52.009341955 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:52.018493891 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:52.018621922 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:52.019289970 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:52.024168015 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:53.050729990 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:53.052052021 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:53.057141066 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:53.342670918 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:53.342989922 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:53.347750902 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:53.638605118 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:53.638874054 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:53.638940096 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:53.639028072 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:53.639475107 CET	50073	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:53.644507885 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:53.644525051 CET	80	50073	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:53.644664049 CET	50073	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:53.644871950 CET	50073	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:53.649689913 CET	80	50073	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:54.421395063 CET	80	50073	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:54.423676014 CET	50073	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:54.423743010 CET	50073	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:54.424175978 CET	50074	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:54.428616047 CET	80	50073	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:54.429013014 CET	80	50074	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:54.429090023 CET	50074	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:54.429147005 CET	50074	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:54.433897972 CET	80	50074	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:55.198837996 CET	80	50074	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:55.198856115 CET	80	50074	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:55.198869944 CET	80	50074	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:55.198949099 CET	50074	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:55.207503080 CET	80	50074	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:55.207580090 CET	50074	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:55.207618952 CET	50074	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:55.207938910 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:55.212421894 CET	80	50074	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:55.212687016 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:55.499090910 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:55.500173092 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:55.505515099 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:55.505595922 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:55.505657911 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:55.510833979 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:55.554428101 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:56.117873907 CET	50076	10169	192.168.2.4	185.220.101.169
Nov 3, 2024 09:43:56.123409986 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:56.123539925 CET	50076	10169	192.168.2.4	185.220.101.169
Nov 3, 2024 09:43:56.123975039 CET	50076	10169	192.168.2.4	185.220.101.169
Nov 3, 2024 09:43:56.128834963 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:56.542941093 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.542979956 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.543001890 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.543024063 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.543045044 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.543042898 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:56.543068886 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.543096066 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:56.543097019 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.543113947 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:56.543119907 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.543143034 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.543159008 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:56.543178082 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.543211937 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:56.548120022 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.548140049 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.548188925 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:56.692449093 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.692480087 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.692491055 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.692500114 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.692504883 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.692516088 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.692646980 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:56.992239952 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.992305994 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:56.992358923 CET	50075	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:43:56.992854118 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:56.997189999 CET	80	50075	193.23.244.244	192.168.2.4
Nov 3, 2024 09:43:56.997611046 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:57.189409018 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:57.190704107 CET	50076	10169	192.168.2.4	185.220.101.169
Nov 3, 2024 09:43:57.195513010 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:57.320961952 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:57.321778059 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:57.326760054 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:57.536524057 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:57.537250042 CET	50076	10169	192.168.2.4	185.220.101.169
Nov 3, 2024 09:43:57.542114019 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:57.661142111 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:57.661519051 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:57.666430950 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:57.882672071 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:57.882755995 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:57.882817984 CET	50076	10169	192.168.2.4	185.220.101.169
Nov 3, 2024 09:43:57.919322968 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:57.919503927 CET	50076	10169	192.168.2.4	185.220.101.169
Nov 3, 2024 09:43:57.920157909 CET	50077	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:57.924426079 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:57.924964905 CET	80	50077	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:57.925045967 CET	50077	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:57.925117970 CET	50077	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:57.929891109 CET	80	50077	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:57.953825951 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:57.954585075 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:57.959372044 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:58.396414995 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:58.421128988 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:58.426116943 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:58.865751028 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:58.866202116 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:58.871063948 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:58.981038094 CET	80	50077	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:58.981156111 CET	50077	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:58.981323957 CET	50077	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:43:58.981970072 CET	50078	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:58.986155033 CET	80	50077	45.66.35.11	192.168.2.4
Nov 3, 2024 09:43:58.986926079 CET	80	50078	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:58.986985922 CET	50078	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:58.987032890 CET	50078	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:58.991992950 CET	80	50078	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:59.308288097 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:59.351386070 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:59.458163977 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:59.458559036 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:59.463407993 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:59.463464022 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:59.468338013 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:59.749380112 CET	80	50078	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:59.749392986 CET	80	50078	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:59.749403000 CET	80	50078	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:59.749411106 CET	80	50078	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:59.749480963 CET	50078	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:59.749581099 CET	50078	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:43:59.750338078 CET	50076	10169	192.168.2.4	185.220.101.169
Nov 3, 2024 09:43:59.750338078 CET	50076	10169	192.168.2.4	185.220.101.169
Nov 3, 2024 09:43:59.750857115 CET	50079	443	192.168.2.4	139.99.170.35
Nov 3, 2024 09:43:59.750883102 CET	443	50079	139.99.170.35	192.168.2.4
Nov 3, 2024 09:43:59.750957012 CET	50079	443	192.168.2.4	139.99.170.35
Nov 3, 2024 09:43:59.751066923 CET	50079	443	192.168.2.4	139.99.170.35
Nov 3, 2024 09:43:59.751075029 CET	443	50079	139.99.170.35	192.168.2.4
Nov 3, 2024 09:43:59.754393101 CET	80	50078	216.218.219.41	192.168.2.4
Nov 3, 2024 09:43:59.754956961 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:59.755209923 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:59.755692959 CET	10169	50076	185.220.101.169	192.168.2.4
Nov 3, 2024 09:43:59.755717993 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:59.755733967 CET	50076	10169	192.168.2.4	185.220.101.169
Nov 3, 2024 09:43:59.760601044 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:43:59.760694981 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:43:59.765441895 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:00.052906036 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:00.053720951 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:00.058485985 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:00.375570059 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:00.376166105 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:00.380934954 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:00.697998047 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:00.698339939 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:00.703700066 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:01.097966909 CET	443	50079	139.99.170.35	192.168.2.4
Nov 3, 2024 09:44:01.098052979 CET	50079	443	192.168.2.4	139.99.170.35
Nov 3, 2024 09:44:01.107523918 CET	50079	443	192.168.2.4	139.99.170.35
Nov 3, 2024 09:44:01.107538939 CET	443	50079	139.99.170.35	192.168.2.4
Nov 3, 2024 09:44:01.107739925 CET	443	50079	139.99.170.35	192.168.2.4
Nov 3, 2024 09:44:01.108002901 CET	50079	443	192.168.2.4	139.99.170.35
Nov 3, 2024 09:44:01.151329994 CET	443	50079	139.99.170.35	192.168.2.4
Nov 3, 2024 09:44:01.390719891 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:01.391174078 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:01.396488905 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:01.396584988 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:01.401727915 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:01.695224047 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:01.696891069 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:01.701911926 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:01.701967955 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:01.706957102 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:01.997462988 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:01.998059988 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:02.003150940 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:02.003202915 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:02.007992029 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:02.300522089 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:02.301250935 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:02.306094885 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:02.609777927 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:02.610721111 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:02.615623951 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:02.916153908 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:02.916636944 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:02.921447039 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:03.223792076 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:03.273188114 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:03.358760118 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:03.358930111 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:03.359217882 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:03.363749981 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:03.363960028 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:03.364327908 CET	9001	50072	145.239.206.31	192.168.2.4
Nov 3, 2024 09:44:03.364372969 CET	50072	9001	192.168.2.4	145.239.206.31
Nov 3, 2024 09:44:09.824003935 CET	50080	9002	192.168.2.4	172.93.106.189
Nov 3, 2024 09:44:09.829216003 CET	9002	50080	172.93.106.189	192.168.2.4
Nov 3, 2024 09:44:09.829293966 CET	50080	9002	192.168.2.4	172.93.106.189
Nov 3, 2024 09:44:09.829617977 CET	50080	9002	192.168.2.4	172.93.106.189
Nov 3, 2024 09:44:09.834369898 CET	9002	50080	172.93.106.189	192.168.2.4
Nov 3, 2024 09:44:10.710263014 CET	9002	50080	172.93.106.189	192.168.2.4
Nov 3, 2024 09:44:10.711836100 CET	50080	9002	192.168.2.4	172.93.106.189
Nov 3, 2024 09:44:10.716695070 CET	9002	50080	172.93.106.189	192.168.2.4
Nov 3, 2024 09:44:10.929717064 CET	9002	50080	172.93.106.189	192.168.2.4
Nov 3, 2024 09:44:10.933866978 CET	50080	9002	192.168.2.4	172.93.106.189
Nov 3, 2024 09:44:10.938884020 CET	9002	50080	172.93.106.189	192.168.2.4
Nov 3, 2024 09:44:11.152667999 CET	9002	50080	172.93.106.189	192.168.2.4
Nov 3, 2024 09:44:11.152687073 CET	9002	50080	172.93.106.189	192.168.2.4
Nov 3, 2024 09:44:11.152733088 CET	50080	9002	192.168.2.4	172.93.106.189
Nov 3, 2024 09:44:11.152838945 CET	50080	9002	192.168.2.4	172.93.106.189
Nov 3, 2024 09:44:11.153256893 CET	50081	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:11.157655954 CET	9002	50080	172.93.106.189	192.168.2.4
Nov 3, 2024 09:44:11.158122063 CET	80	50081	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:11.158301115 CET	50081	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:11.158329010 CET	50081	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:11.163249016 CET	80	50081	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:12.191438913 CET	80	50081	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:12.191523075 CET	50081	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:12.191613913 CET	50081	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:12.192105055 CET	50082	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:12.196333885 CET	80	50081	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:12.196908951 CET	80	50082	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:12.196980953 CET	50082	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:12.197047949 CET	50082	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:12.201800108 CET	80	50082	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:13.254951000 CET	80	50082	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:13.255028009 CET	50082	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:13.255108118 CET	50082	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:13.255590916 CET	50083	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:13.259999037 CET	80	50082	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:13.260584116 CET	80	50083	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:13.260665894 CET	50083	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:13.260731936 CET	50083	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:13.265908957 CET	80	50083	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:14.319396019 CET	80	50083	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:14.319492102 CET	50083	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:14.319533110 CET	50083	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:14.320007086 CET	50080	9002	192.168.2.4	172.93.106.189
Nov 3, 2024 09:44:14.320041895 CET	50080	9002	192.168.2.4	172.93.106.189
Nov 3, 2024 09:44:14.320619106 CET	50084	8430	192.168.2.4	89.58.26.216
Nov 3, 2024 09:44:14.324695110 CET	80	50083	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:14.324837923 CET	9002	50080	172.93.106.189	192.168.2.4
Nov 3, 2024 09:44:14.325256109 CET	9002	50080	172.93.106.189	192.168.2.4
Nov 3, 2024 09:44:14.325310946 CET	50080	9002	192.168.2.4	172.93.106.189
Nov 3, 2024 09:44:14.325570107 CET	8430	50084	89.58.26.216	192.168.2.4
Nov 3, 2024 09:44:14.325643063 CET	50084	8430	192.168.2.4	89.58.26.216
Nov 3, 2024 09:44:14.325759888 CET	50084	8430	192.168.2.4	89.58.26.216
Nov 3, 2024 09:44:14.331026077 CET	8430	50084	89.58.26.216	192.168.2.4
Nov 3, 2024 09:44:15.369909048 CET	8430	50084	89.58.26.216	192.168.2.4
Nov 3, 2024 09:44:15.371243000 CET	50084	8430	192.168.2.4	89.58.26.216
Nov 3, 2024 09:44:15.376117945 CET	8430	50084	89.58.26.216	192.168.2.4
Nov 3, 2024 09:44:15.674777985 CET	8430	50084	89.58.26.216	192.168.2.4
Nov 3, 2024 09:44:15.675111055 CET	50084	8430	192.168.2.4	89.58.26.216
Nov 3, 2024 09:44:15.679915905 CET	8430	50084	89.58.26.216	192.168.2.4
Nov 3, 2024 09:44:15.981652975 CET	8430	50084	89.58.26.216	192.168.2.4
Nov 3, 2024 09:44:15.981775045 CET	8430	50084	89.58.26.216	192.168.2.4
Nov 3, 2024 09:44:15.981832027 CET	50084	8430	192.168.2.4	89.58.26.216
Nov 3, 2024 09:44:15.982012987 CET	50084	8430	192.168.2.4	89.58.26.216
Nov 3, 2024 09:44:15.982950926 CET	50085	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:15.987020016 CET	8430	50084	89.58.26.216	192.168.2.4
Nov 3, 2024 09:44:15.987910986 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:15.987986088 CET	50085	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:15.988121033 CET	50085	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:15.994654894 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.042607069 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.042625904 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.042635918 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.042640924 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.042653084 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.042670965 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.042685986 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.042697906 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.042709112 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.042721033 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.042732000 CET	50085	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:17.042785883 CET	50085	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:17.048444986 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.101340055 CET	50085	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:17.179382086 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.179527044 CET	50085	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:17.179579973 CET	50085	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:17.180186033 CET	50084	8430	192.168.2.4	89.58.26.216
Nov 3, 2024 09:44:17.180213928 CET	50084	8430	192.168.2.4	89.58.26.216
Nov 3, 2024 09:44:17.180723906 CET	50086	9001	192.168.2.4	185.220.101.27
Nov 3, 2024 09:44:17.184339046 CET	80	50085	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:17.185107946 CET	8430	50084	89.58.26.216	192.168.2.4
Nov 3, 2024 09:44:17.185626984 CET	9001	50086	185.220.101.27	192.168.2.4
Nov 3, 2024 09:44:17.185689926 CET	50086	9001	192.168.2.4	185.220.101.27
Nov 3, 2024 09:44:17.185769081 CET	8430	50084	89.58.26.216	192.168.2.4
Nov 3, 2024 09:44:17.185817957 CET	50084	8430	192.168.2.4	89.58.26.216
Nov 3, 2024 09:44:17.185951948 CET	50086	9001	192.168.2.4	185.220.101.27
Nov 3, 2024 09:44:17.191112041 CET	9001	50086	185.220.101.27	192.168.2.4
Nov 3, 2024 09:44:18.251056910 CET	9001	50086	185.220.101.27	192.168.2.4
Nov 3, 2024 09:44:18.252691031 CET	50086	9001	192.168.2.4	185.220.101.27
Nov 3, 2024 09:44:18.257906914 CET	9001	50086	185.220.101.27	192.168.2.4
Nov 3, 2024 09:44:18.560683966 CET	9001	50086	185.220.101.27	192.168.2.4
Nov 3, 2024 09:44:18.561311960 CET	50086	9001	192.168.2.4	185.220.101.27
Nov 3, 2024 09:44:18.566344976 CET	9001	50086	185.220.101.27	192.168.2.4
Nov 3, 2024 09:44:18.868257999 CET	9001	50086	185.220.101.27	192.168.2.4
Nov 3, 2024 09:44:18.868324041 CET	9001	50086	185.220.101.27	192.168.2.4
Nov 3, 2024 09:44:18.868388891 CET	50086	9001	192.168.2.4	185.220.101.27
Nov 3, 2024 09:44:18.868681908 CET	50086	9001	192.168.2.4	185.220.101.27
Nov 3, 2024 09:44:18.869659901 CET	50087	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:44:18.873433113 CET	9001	50086	185.220.101.27	192.168.2.4
Nov 3, 2024 09:44:18.874552011 CET	80	50087	216.218.219.41	192.168.2.4
Nov 3, 2024 09:44:18.874634027 CET	50087	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:44:18.874768019 CET	50087	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:44:18.879559040 CET	80	50087	216.218.219.41	192.168.2.4
Nov 3, 2024 09:44:19.759516954 CET	80	50087	216.218.219.41	192.168.2.4
Nov 3, 2024 09:44:19.759660959 CET	50087	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:44:19.759706020 CET	50087	80	192.168.2.4	216.218.219.41
Nov 3, 2024 09:44:19.760174990 CET	50088	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:19.764990091 CET	80	50087	216.218.219.41	192.168.2.4
Nov 3, 2024 09:44:19.765002012 CET	80	50088	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:19.765073061 CET	50088	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:19.765129089 CET	50088	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:19.769896030 CET	80	50088	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:20.813198090 CET	80	50088	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:20.813271999 CET	50088	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:20.813337088 CET	50088	80	192.168.2.4	45.66.35.11
Nov 3, 2024 09:44:20.813858032 CET	50089	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:20.818070889 CET	80	50088	45.66.35.11	192.168.2.4
Nov 3, 2024 09:44:20.818639994 CET	80	50089	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:20.818706989 CET	50089	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:20.818784952 CET	50089	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:20.823627949 CET	80	50089	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:21.878102064 CET	80	50089	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:21.878173113 CET	50089	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:21.880681038 CET	50089	80	192.168.2.4	193.23.244.244
Nov 3, 2024 09:44:21.885494947 CET	80	50089	193.23.244.244	192.168.2.4
Nov 3, 2024 09:44:21.891108990 CET	50086	9001	192.168.2.4	185.220.101.27
Nov 3, 2024 09:44:21.891604900 CET	50086	9001	192.168.2.4	185.220.101.27
Nov 3, 2024 09:44:21.895955086 CET	9001	50086	185.220.101.27	192.168.2.4
Nov 3, 2024 09:44:21.896653891 CET	9001	50086	185.220.101.27	192.168.2.4
Nov 3, 2024 09:44:21.896702051 CET	50086	9001	192.168.2.4	185.220.101.27

HTTP Request Dependency Graph

199.254.238.52

193.23.244.244

45.66.35.11

216.218.219.41

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	199.254.238.52	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:18.851675987 CET	154	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 199.254.238.52 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	193.23.244.244	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:21.937674999 CET	154	OUT	GET /tor/status-vote/current/consensus HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:22.987242937 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:22 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Sun, 03 Nov 2024 09:00:00 GMT Vary: X-Or-Diff-From-Consensus Data Raw: 6e 65 74 77 6f 72 6b 2d 73 74 61 74 75 73 2d 76 65 72 73 69 6f 6e 20 33 0a 76 6f 74 65 2d 73 74 61 74 75 73 20 63 6f 6e 73 65 6e 73 75 73 0a 63 6f 6e 73 65 6e 73 75 73 2d 6d 65 74 68 6f 64 20 33 33 0a 76 61 6c 69 64 2d 61 66 74 65 72 20 32 30 32 34 2d 31 31 2d 30 33 20 30 38 3a 30 30 3a 30 30 0a 66 72 65 73 68 2d 75 6e 74 69 6c 20 32 30 32 34 2d 31 31 2d 30 33 20 30 39 3a 30 30 3a 30 30 0a 76 61 6c 69 64 2d 75 6e 74 69 6c 20 32 30 32 34 2d 31 31 2d 30 33 20 31 31 3a 30 30 3a 30 30 0a 76 6f 74 69 6e 67 2d 64 65 6c 61 79 20 33 30 30 20 33 30 30 0a 63 6c 69 65 6e 74 2d 76 65 72 73 69 6f 6e 73 20 30 2e 34 2e 38 2e 31 2d 61 6c 70 68 61 2c 30 2e 34 2e 38 2e 32 2d 61 6c 70 68 61 2c 30 2e 34 2e 38 2e 33 2d 72 63 2c 30 2e 34 2e 38 2e 34 2c 30 2e 34 2e 38 2e 35 2c 30 2e 34 2e 38 2e 36 2c 30 2e 34 2e 38 2e 37 2c 30 2e 34 2e 38 2e 38 2c 30 2e 34 2e 38 2e 39 2c 30 2e 34 2e 38 2e 31 30 2c 30 2e 34 2e 38 2e 31 31 2c 30 2e 34 2e 38 2e 31 32 2c 30 2e 34 2e 38 2e 31 33 0a 73 65 72 76 65 72 2d 76 65 72 73 69 6f 6e 73 [TRUNCATED] Data Ascii: network-status-version 3vote-status consensusconsensus-method 33valid-after 2024-11-03 08:00:00fresh-until 2024-11-03 09:00:00valid-until 2024-11-03 11:00:00voting-delay 300 300client-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13server-versions 0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9,0.4.8.10,0.4.8.11,0.4.8.12,0.4.8.13known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Validrecommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2params AuthDirMa [TRUNCATED]
Nov 3, 2024 09:41:22.987260103 CET	1236	IN	Data Raw: 50 65 72 41 64 64 72 3d 38 20 43 69 72 63 75 69 74 50 72 69 6f 72 69 74 79 48 61 6c 66 6c 69 66 65 4d 73 65 63 3d 33 30 30 30 30 20 44 6f 53 43 69 72 63 75 69 74 43 72 65 61 74 69 6f 6e 42 75 72 73 74 3d 36 30 20 44 6f 53 43 69 72 63 75 69 74 43 Data Ascii: PerAddr=8 CircuitPriorityHalflifeMsec=30000 DoSCircuitCreationBurst=60 DoSCircuitCreationEnabled=1 DoSCircuitCreationMinConnections=2 DoSCircuitCreationRate=2 DoSConnectionEnabled=1 DoSConnectionMaxConcurrentCount=50 DoSRefuseSingleHopClientRe
Nov 3, 2024 09:41:22.987279892 CET	1236	IN	Data Raw: 0a 63 6f 6e 74 61 63 74 20 41 6e 64 72 65 61 73 20 4c 65 68 6e 65 72 0a 76 6f 74 65 2d 64 69 67 65 73 74 20 39 35 45 42 30 38 46 31 46 43 38 46 39 33 38 38 31 37 38 46 33 43 35 46 32 36 32 44 44 32 44 36 46 44 36 35 37 46 36 43 0a 64 69 72 2d 73 Data Ascii: contact Andreas Lehnervote-digest 95EB08F1FC8F9388178F3C5F262DD2D6FD657F6Cdir-source longclaw 23D15D965BC35114467363C165C4F724B64B4F66 199.58.81.140 199.58.81.140 80 443contact Riseup Networks <collective at riseup dot net> - 1nNzekuHGGzBY
Nov 3, 2024 09:41:22.987292051 CET	636	IN	Data Raw: 5d 73 61 62 6f 74 61 67 65 2e 6f 72 67 20 75 72 6c 3a 68 74 74 70 73 3a 2f 2f 73 61 62 6f 74 61 67 65 2e 6e 65 74 20 70 72 6f 6f 66 3a 75 72 69 2d 72 73 61 20 61 62 75 73 65 3a 61 62 75 73 65 5b 5d 73 61 62 6f 74 61 67 65 2e 6e 65 74 20 74 77 69 Data Ascii: ]sabotage.org url:https://sabotage.net proof:uri-rsa abuse:abuse[]sabotage.net twitter:adejoode ciissversion:2vote-digest 648237AE24498B01A75BB12E649531ED0B77E1ADdir-source gabelmoo ED03BB616EB2F60BEC80151114BB25CEF515B226 131.188.40.189 131
Nov 3, 2024 09:41:22.987303972 CET	1236	IN	Data Raw: 72 20 73 65 65 6c 65 20 41 41 6f 51 31 44 41 52 36 6b 6b 6f 6f 31 39 68 42 41 58 35 4b 30 51 7a 74 4e 77 20 76 52 79 6e 4d 6f 42 6d 4f 63 74 77 42 77 65 39 61 52 52 35 57 43 7a 35 66 49 73 20 32 30 32 34 2d 31 31 2d 30 33 20 30 32 3a 32 30 3a 34 Data Ascii: r seele AAoQ1DAR6kkoo19hBAX5K0QztNw vRynMoBmOctwBwe9aRR5WCz5fIs 2024-11-03 02:20:44 104.53.221.159 9001 0s Fast HSDir Running Stable V2Dir Validv Tor 0.4.8.12pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=
Nov 3, 2024 09:41:22.987320900 CET	1236	IN	Data Raw: 65 20 56 32 44 69 72 20 56 61 6c 69 64 0a 76 20 54 6f 72 20 30 2e 34 2e 38 2e 31 32 0a 70 72 20 43 6f 6e 66 6c 75 78 3d 31 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d Data Ascii: e V2Dir Validv Tor 0.4.8.12pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=26000p reject 25,109-110,119,135-139,143,445,465,563,587,99
Nov 3, 2024 09:41:22.987333059 CET	1236	IN	Data Raw: 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 72 6c 3d 31 2d 32 20 48 53 44 69 72 3d 32 20 48 53 49 6e 74 72 6f 3d 34 2d 35 20 48 53 52 65 6e 64 3d 31 2d 32 20 4c 69 6e 6b 3d 31 2d 35 20 4c 69 6e 6b 41 75 74 68 3d 31 2c 33 Data Ascii: c=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=10000p accept 20-23,43,53,79-81,88,110,143,194,220,389,443,464,531,543-544,554,563,636,706,749,873,902-904,981,98
Nov 3, 2024 09:41:22.987344980 CET	1236	IN	Data Raw: 51 50 69 77 38 20 79 71 73 38 55 5a 54 72 78 37 35 6c 44 63 49 52 6e 32 6f 51 71 75 64 4c 53 55 30 20 32 30 32 34 2d 31 31 2d 30 32 20 31 37 3a 31 32 3a 35 35 20 39 35 2e 32 31 37 2e 32 32 38 2e 36 31 20 39 30 30 30 20 30 0a 61 20 5b 32 61 30 31 Data Ascii: QPiw8 yqs8UZTrx75lDcIRn2oQqudLSU0 2024-11-02 17:12:55 95.217.228.61 9000 0a [2a01:4f9:4b:4c18::2]:9000s Fast Guard HSDir Running Stable V2Dir Validv Tor 0.4.8.12pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSR
Nov 3, 2024 09:41:22.987355947 CET	1236	IN	Data Raw: 53 74 61 62 6c 65 20 56 32 44 69 72 20 56 61 6c 69 64 0a 76 20 54 6f 72 20 30 2e 34 2e 38 2e 31 32 0a 70 72 20 43 6f 6e 66 6c 75 78 3d 31 20 43 6f 6e 73 3d 31 2d 32 20 44 65 73 63 3d 31 2d 32 20 44 69 72 43 61 63 68 65 3d 32 20 46 6c 6f 77 43 74 Data Ascii: Stable V2Dir Validv Tor 0.4.8.12pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4w Bandwidth=41000p reject 1-65535r ForPrivacyNET ADb6NqtDX9XQ9kBi
Nov 3, 2024 09:41:22.987368107 CET	1236	IN	Data Raw: 64 64 69 6e 67 3d 32 20 52 65 6c 61 79 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 31 39 30 0a 70 20 72 65 6a 65 63 74 20 31 2d 36 35 35 33 35 0a 72 20 64 63 36 6a 67 6b 31 31 64 20 41 45 43 6c 73 45 78 2b 4d 4a 30 33 79 2b 66 74 73 72 63 Data Ascii: dding=2 Relay=1-4w Bandwidth=190p reject 1-65535r dc6jgk11d AEClsEx+MJ03y+ftsrctPhXQV8E VzhXXdXLT+DZB1sgB/iRV9A1Nvc 2024-11-03 06:44:39 51.15.75.120 444 0a [2001:bc8:1860:607::1]:444s Fast Guard Running Stable V2Dir Validv Tor 0.4.8.13p
Nov 3, 2024 09:41:22.992325068 CET	1236	IN	Data Raw: 3d 31 2d 34 0a 77 20 42 61 6e 64 77 69 64 74 68 3d 32 35 30 30 30 0a 70 20 61 63 63 65 70 74 20 34 33 2c 35 33 2c 38 30 2c 31 31 30 2c 31 34 33 2c 31 39 34 2c 32 32 30 2c 34 34 33 2c 38 37 33 2c 39 39 31 2c 39 39 33 2d 39 39 35 2c 31 31 39 34 2c Data Ascii: =1-4w Bandwidth=25000p accept 43,53,80,110,143,194,220,443,873,991,993-995,1194,1293,3690,4321,5222-5223,5228,6660-6669,6679,6697,9418,11371,64738r Athena AF7ZchP3JYZ+QiuNwEQzYbuyTjw SjK1vzMvNwCjM2Rn3ZmdP++wYrk 2024-11-03 04:20:03 104.244.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49734	193.23.244.244	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:29.579150915 CET	175	OUT	GET /tor/server/fp/fbd40937c6e1523ca717036fc4fd5ecc832a93b7 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49735	45.66.35.11	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:30.633366108 CET	172	OUT	GET /tor/server/fp/fbd40937c6e1523ca717036fc4fd5ecc832a93b7 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:31.671094894 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:31 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:31 GMT Data Raw: 72 6f 75 74 65 72 20 6e 6f 6e 6f 6e 69 63 65 74 72 79 20 31 38 38 2e 36 38 2e 35 38 2e 31 30 35 20 34 38 32 35 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 64 53 41 56 73 4b 49 6e 32 73 49 6a 4c 61 64 72 74 6f 44 50 6b 48 35 70 37 69 44 4e 32 4f 78 35 34 42 53 69 75 42 53 39 79 70 6e 48 6a 4f 41 51 41 67 42 41 44 69 6e 61 42 33 0a 30 43 2b 4d 4e 51 31 35 39 53 76 45 7a 70 58 53 32 64 6b 49 74 49 7a 4a 32 56 37 69 38 34 4f 50 38 65 50 6d 74 33 73 68 2f 71 46 78 74 4b 2b 50 78 44 6e 38 53 37 44 77 39 39 51 49 5a 71 36 54 0a 44 52 6b 52 32 73 4f 4d 45 47 66 52 6f 2f 67 5a 41 6b 63 71 79 67 6d 41 43 4a 5a 72 70 77 72 6a 43 4d 74 49 4d 50 7a 63 39 37 6a 50 4b 76 69 4b 46 51 44 51 42 6e 69 35 4a 41 59 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 34 70 32 67 64 39 41 76 6a 44 55 4e 65 [TRUNCATED] Data Ascii: router nononicetry 188.68.58.105 4825 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1dSAVsKIn2sIjLadrtoDPkH5p7iDN2Ox54BSiuBS9ypnHjOAQAgBADinaB30C+MNQ159SvEzpXS2dkItIzJ2V7i84OP8ePmt3sh/qFxtK+PxDn8S7Dw99QIZq6TDRkR2sOMEGfRo/gZAkcqygmACJZrpwrjCMtIMPzc97jPKviKFQDQBni5JAY=-----END ED25519 CERT-----master-key-ed25519 4p2gd9AvjDUNefUrxM6V0tnZCLSMydle4vODj/Hj5rcor-address [2a03:4000:6:f808:948b:b5ff:fe41:2238]:4825platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 05:06:03fingerprint FBD4 0937 C6E1 523C A717 036F C4FD 5ECC 832A 93B7uptime 3bandwidth 10485760 1073741824 18579456extra-info-digest C75CC6D8E76057DE5720EE7C53E698B0D851981C u3sGIoiU6touPnmVwnMFzWTlXvAwo1uNJJ7+93hASnEonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOQWh5upg1xDt9449j+l70rHt5n+jRZOV95cLiOSBWMnFW72CwaOKr0Ll5BJKjxuunGdgRZ54TS1ZyvRwn+qCZqDY+4dCiAUSx8bqzOZEQdRlzl12QM5kBR [TRUNCATED]
Nov 3, 2024 09:41:31.671112061 CET	1236	IN	Data Raw: 46 61 67 31 45 2f 6a 59 35 49 53 55 78 70 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 Data Ascii: Fag1E/jY5ISUxpAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK/o4NdgT4nszwo+nOchfR6f+3t+czZlR25uQeHrT2OOxRQmNVFsOjFFLceAFC/Cb+Qux31ISpbq1o/D2lfHrhkvWUJhzIRs5WmWN03Ef24g5mpC8/gr+0Jx6FFIvzYSk5U6svwwoU
Nov 3, 2024 09:41:31.671123981 CET	38	IN	Data Raw: 78 56 52 52 4c 4d 2b 4d 42 31 47 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 53 49 47 4e 41 54 55 52 45 2d 2d 2d 2d 2d 0a Data Ascii: xVRRLM+MB1GA=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49736	216.218.219.41	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:32.125080109 CET	175	OUT	GET /tor/server/fp/a594fda26bd3c74c22da74b5a078baeb085ad481 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:32.884776115 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:32 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:32 GMT Data Raw: 72 6f 75 74 65 72 20 30 78 64 65 61 64 62 65 65 66 20 35 31 2e 33 38 2e 32 32 35 2e 34 36 20 34 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 64 36 41 5a 38 67 72 43 51 44 73 68 57 34 4f 49 59 52 75 61 61 57 67 6d 49 33 45 67 7a 6f 2f 31 74 32 67 6a 43 50 71 7a 75 6f 53 75 66 50 41 51 41 67 42 41 43 42 55 59 47 50 0a 66 45 6a 50 68 78 45 4a 72 6f 68 78 6d 51 34 34 67 6f 7a 59 57 78 70 36 6f 67 55 43 42 30 55 32 73 33 4d 51 4d 58 55 36 50 4e 53 68 41 39 54 7a 47 72 68 6d 47 4f 2b 31 48 31 55 77 73 59 59 43 0a 6e 6c 73 31 43 72 42 72 34 6b 6a 74 78 39 46 5a 38 66 6c 2f 47 4c 4e 41 2f 56 6a 30 43 33 63 6b 7a 62 67 56 4a 4a 53 45 62 39 4a 6c 43 55 4e 2f 4e 51 41 63 46 7a 55 4d 4d 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 67 56 47 42 6a 33 78 49 7a 34 63 52 43 61 36 49 [TRUNCATED] Data Ascii: router 0xdeadbeef 51.38.225.46 443 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1d6AZ8grCQDshW4OIYRuaaWgmI3Egzo/1t2gjCPqzuoSufPAQAgBACBUYGPfEjPhxEJrohxmQ44gozYWxp6ogUCB0U2s3MQMXU6PNShA9TzGrhmGO+1H1UwsYYCnls1CrBr4kjtx9FZ8fl/GLNA/Vj0C3ckzbgVJJSEb9JlCUN/NQAcFzUMMAE=-----END ED25519 CERT-----master-key-ed25519 gVGBj3xIz4cRCa6IcZkOOIKM2FsaeqIFAgdFNrNzEDEor-address [2001:41d0:304:200::3348]:443platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 03:08:17fingerprint A594 FDA2 6BD3 C74C 22DA 74B5 A078 BAEB 085A D481uptime 4932152bandwidth 1073741824 1073741824 41783055extra-info-digest 49411BC2B0B0B7D29B144F5E440BC926F722E321 lFxCydzWpy2bZeTw2HrAoe8BNEBZ5iHLtP69PIzx9Rgonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKmNAi9c77dZV6ZYYKwzFpZlGfMOLukGP0Ze7gsbKSClHbX1wXQo+VYrXixds2wTEtIxXRbRG0uu8Sp2qAC/R1mPj54ISyHa0YqVcHGLDOO/QXFBpeIg8DhmH3GVfdU [TRUNCATED]
Nov 3, 2024 09:41:32.884799957 CET	1236	IN	Data Raw: 6e 2b 71 6f 35 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d Data Ascii: n+qo5AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK1BxhiPLE8b6+3ZZ3OfV0pQlxE8bwTSRuPUUjJSjnmZ1mjawkrdENUjwHnAa7bTdbYrcQ6yXiygXmAY6b7pSiILGd3+qB6hES/JINvSsdbBTt62k2CX+jM4dxwdnogjTGir2ApRS01IYS5eGPW
Nov 3, 2024 09:41:32.884819031 CET	869	IN	Data Raw: 35 34 2e 30 2e 30 2f 31 36 3a 2a 0a 72 65 6a 65 63 74 20 31 32 37 2e 30 2e 30 2e 30 2f 38 3a 2a 0a 72 65 6a 65 63 74 20 31 39 32 2e 31 36 38 2e 30 2e 30 2f 31 36 3a 2a 0a 72 65 6a 65 63 74 20 31 30 2e 30 2e 30 2e 30 2f 38 3a 2a 0a 72 65 6a 65 63 Data Ascii: 54.0.0/16:reject 127.0.0.0/8:reject 192.168.0.0/16:reject 10.0.0.0/8:reject 172.16.0.0/12:reject 51.38.225.46:reject :22reject :25reject :110reject :143reject :194reject :465reject :563reject :587reject *:135-139re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49737	216.218.219.41	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:33.862711906 CET	175	OUT	GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:34.613708973 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:34 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:34 GMT Data Raw: 72 6f 75 74 65 72 20 48 61 70 70 79 54 6f 72 20 32 30 39 2e 31 34 31 2e 36 30 2e 32 31 39 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 67 4a 41 59 72 6d 75 79 7a 6f 41 30 2f 6c 6d 6d 64 48 51 32 66 6c 63 37 41 4b 41 49 37 6c 53 51 74 32 56 33 72 63 61 34 56 74 64 75 48 71 41 51 41 67 42 41 43 55 42 4b 54 56 0a 52 65 6d 58 2f 70 4b 64 78 32 47 6e 45 66 34 62 6d 6d 52 4f 6f 48 31 4e 35 4a 4b 71 4e 65 4e 33 57 2b 6e 43 49 65 50 4e 37 47 72 38 2f 65 32 70 6d 71 2f 53 35 78 35 55 54 71 41 51 78 37 2f 75 0a 57 74 58 76 69 39 4d 33 47 79 36 48 37 67 32 4b 5a 55 51 6f 66 33 59 77 63 63 33 2b 61 37 6b 62 37 4e 79 4e 59 31 4c 33 6e 53 4b 79 30 37 37 32 75 68 42 35 37 54 4b 48 66 51 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6c 41 53 6b 31 55 58 70 6c 2f 36 53 6e 63 64 [TRUNCATED] Data Ascii: router HappyTor 209.141.60.219 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1gJAYrmuyzoA0/lmmdHQ2flc7AKAI7lSQt2V3rca4VtduHqAQAgBACUBKTVRemX/pKdx2GnEf4bmmROoH1N5JKqNeN3W+nCIePN7Gr8/e2pmq/S5x5UTqAQx7/uWtXvi9M3Gy6H7g2KZUQof3Ywcc3+a7kb7NyNY1L3nSKy0772uhB57TKHfQE=-----END ED25519 CERT-----master-key-ed25519 lASk1UXpl/6SncdhpxH+G5pkTqB9TeSSqjXjd1vpwiEor-address [2605:6400:20:a28:b37e:88e9:caa1:7b9c]:9001platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 20:40:34fingerprint FE27 7F2B 34C9 0904 C1A2 D704 ED2A 46FC 0802 400Cuptime 4410101bandwidth 1073741824 1073741824 8503151extra-info-digest EAB656F26B43CE56B02390FF4076A548AB864702 PIbpAgNRXZhiaxy53c7ySSDBfpMZZDJS/MbIRb7vT3Eonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL06TyhNChZstL/n8rmtdpMeHGfOTp8KHuzztwgue2YJx5hTP3+jFtVqurlj5znDZKYKu8VlXG/6jXRW4ic+6iu8FT7G75i6UawcjeoLTlFXI/xpSV [TRUNCATED]
Nov 3, 2024 09:41:34.613725901 CET	1236	IN	Data Raw: 79 4a 68 75 42 2f 54 31 50 70 2b 33 50 6f 66 37 6c 33 62 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 Data Ascii: yJhuB/T1Pp+3Pof7l3bAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMh1VmDJF2Bo2TVKuQAd0TZZdy7tI9gvgtLvLx8Zhmnf1rqGiYlgJsG/pU2iguKNcZk4ne9ZqKBuYs8ZIR7XN+v/YBZx5suXKBvUVgldMcTwrSr65TwHzwHQ7NGx29Y+nFpHm
Nov 3, 2024 09:41:34.613737106 CET	1236	IN	Data Raw: 65 70 74 20 2a 3a 34 36 34 0a 61 63 63 65 70 74 20 2a 3a 35 33 31 0a 61 63 63 65 70 74 20 2a 3a 35 34 33 2d 35 34 34 0a 61 63 63 65 70 74 20 2a 3a 35 35 34 0a 61 63 63 65 70 74 20 2a 3a 35 36 33 0a 61 63 63 65 70 74 20 2a 3a 36 33 36 0a 61 63 63 Data Ascii: ept :464accept :531accept :543-544accept :554accept :563accept :636accept :706accept :749accept :853accept :873accept :902-904accept :981accept :989-990accept :991accept :992accept :993accept :994accept :995
Nov 3, 2024 09:41:34.613749027 CET	395	IN	Data Raw: 31 2c 31 39 32 39 34 2c 31 39 36 33 38 2c 35 30 30 30 32 2c 36 34 37 33 38 0a 74 75 6e 6e 65 6c 6c 65 64 2d 64 69 72 2d 73 65 72 76 65 72 0a 72 6f 75 74 65 72 2d 73 69 67 2d 65 64 32 35 35 31 39 20 55 4f 4d 7a 52 64 48 4b 63 47 6d 30 78 36 63 73 Data Ascii: 1,19294,19638,50002,64738tunnelled-dir-serverrouter-sig-ed25519 UOMzRdHKcGm0x6csWkX2Q8mFTEStLmBnsQ6gY6+vRT8TfajsUOjEDT3PH8ix/LjAxrjNVltomzYSiWxN8QgbAArouter-signature-----BEGIN SIGNATURE-----D+SsVFqvrzxXE7rCb+SRIyL33/ihp1BEn8LCkxu5wDJvT0b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49739	45.66.35.11	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:36.448154926 CET	172	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49742	216.218.219.41	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:37.493886948 CET	175	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49744	45.66.35.11	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:38.271003008 CET	172	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:39.332380056 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:39 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:39 GMT Data Raw: 72 6f 75 74 65 72 20 50 79 6f 74 72 54 6f 72 70 6f 74 6b 69 6e 4f 6e 65 20 31 34 39 2e 35 36 2e 34 35 2e 32 30 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 63 44 41 53 35 6c 54 32 78 68 6b 77 32 58 77 78 6e 4f 4d 5a 34 4a 36 51 33 4c 50 43 52 57 42 58 57 76 6f 6d 77 31 69 59 70 34 6a 63 38 59 41 51 41 67 42 41 43 48 36 2b 6d 43 0a 4b 4b 33 39 56 71 6d 65 53 64 4c 57 53 2f 32 6b 4b 71 77 6e 48 74 64 66 64 5a 70 61 6c 45 4d 71 35 37 4f 59 42 43 48 38 4b 44 33 45 67 75 6e 43 53 69 72 4b 56 56 59 72 69 47 49 50 6d 7a 41 79 0a 55 6a 49 7a 37 44 69 4a 61 6a 77 59 61 69 78 43 2b 57 41 41 35 68 49 50 35 50 71 53 7a 53 4d 58 78 36 4e 48 75 6f 74 78 4f 66 65 52 79 39 34 43 47 75 71 39 66 41 5a 50 6f 77 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 68 2b 76 70 67 69 69 [TRUNCATED] Data Ascii: router PyotrTorpotkinOne 149.56.45.200 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1cDAS5lT2xhkw2XwxnOMZ4J6Q3LPCRWBXWvomw1iYp4jc8YAQAgBACH6+mCKK39VqmeSdLWS/2kKqwnHtdfdZpalEMq57OYBCH8KD3EgunCSirKVVYriGIPmzAyUjIz7DiJajwYaixC+WAA5hIP5PqSzSMXx6NHuotxOfeRy94CGuq9fAZPow4=-----END ED25519 CERT-----master-key-ed25519 h+vpgiit/VapnknS1kv9pCqsJx7XX3WaWpRDKuezmAQor-address [2607:5300:201:3000::17d3]:9002platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 07:17:35fingerprint FE29 6180 0188 33AF 03A8 EACD 5894 A614 623D 3F76uptime 10761635bandwidth 1073741824 1073741824 8409924extra-info-digest 1149D3B726C580725AA23EB7E0547F72442B83AF rSLE7OmFCa2zHtjF01XE8M4YGMN2eHMdlEj01Qgvg0Uonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM5P5jLfwZXHgqKmdcBVbAKu2ZkLKp0ThmBwz/KXhlVPuch2I1o+hy278H0ohUygYg5vnrzp4DjrlvRVOyTQLuQrbS+nmepifOBzkhAv5UFhJder0y5Gd [TRUNCATED]
Nov 3, 2024 09:41:39.332391977 CET	212	IN	Data Raw: 36 6d 76 77 42 4c 76 59 79 35 67 43 62 31 2f 62 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 Data Ascii: 6mvwBLvYy5gCb1/bAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANWCEBgvk/XepUJDMN08SS8L+E523Ee2zwkgWow2MOlf2LV9AiTSAeyCs+8eaJ4JlSH0vhER9mpYL/xn7V37CDgajUGjnmoicaZoIdiohx
Nov 3, 2024 09:41:39.332401991 CET	1236	IN	Data Raw: 58 43 66 61 4d 43 63 4c 50 2b 45 2b 6f 45 0a 35 49 76 7a 6e 50 36 7a 64 6b 79 71 39 4e 65 51 38 41 6b 56 2f 63 69 50 59 6d 51 61 45 4c 49 4b 42 51 78 50 32 64 71 56 53 65 45 6f 7a 75 68 41 62 47 51 70 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 Data Ascii: XCfaMCcLP+E+oE5IvznP6zdkyq9NeQ8AkV/ciPYmQaELIKBQxP2dqVSeEozuhAbGQpAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----luEGhlxJI64Rk7HSSpo6y4tO5a3aJCxeiFoxMvwV1qjDjuxhriY7a7oCYGulyMvPEJm5JS5cnkefuIUTRQu0Q4Z/+XE
Nov 3, 2024 09:41:39.332412958 CET	157	IN	Data Raw: 2b 4c 6c 66 33 30 55 4f 57 66 76 50 68 4f 76 68 47 64 6a 36 34 43 0a 70 6d 6d 31 34 38 61 69 6f 48 38 62 75 59 6b 63 36 32 4d 49 78 6a 36 51 57 67 51 73 61 4f 6c 74 4b 36 2f 6d 71 73 50 6f 33 58 56 6d 45 33 45 66 4c 75 65 39 53 4e 6f 7a 79 36 32 Data Ascii: +Llf30UOWfvPhOvhGdj64Cpmm148aioH8buYkc62MIxj6QWgQsaOltK6/mqsPo3XVmE3EfLue9SNozy62eMIRLE5zCt+XuGHFQEqzZsNV2dEGy81kMxX197qePa9yfYZM=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	45.66.35.11	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:41.540096998 CET	172	OUT	GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:43.047483921 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:42 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:42 GMT Data Raw: 72 6f 75 74 65 72 20 46 52 45 45 57 41 59 20 33 31 2e 32 32 30 2e 37 34 2e 31 33 33 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 69 44 41 52 62 44 69 59 45 79 6d 62 75 34 4a 61 36 39 54 61 56 6f 62 70 43 45 43 42 59 65 76 33 4b 7a 32 4f 6b 49 52 48 4f 61 61 62 36 79 41 51 41 67 42 41 41 66 6f 77 46 48 0a 78 74 36 36 79 58 50 76 65 50 4c 65 34 43 4f 4e 67 6f 54 46 51 54 79 51 74 69 58 72 43 35 49 6a 4a 45 4c 72 6b 2f 54 38 4d 66 64 59 4d 6f 2f 4e 49 35 64 44 4a 32 53 59 33 65 6a 4f 79 59 66 48 0a 77 6b 76 62 66 6b 51 56 33 57 6c 52 32 41 43 6a 6e 2f 44 31 2f 41 6f 55 4f 78 43 51 7a 2f 59 35 49 55 53 6d 64 68 6b 73 57 5a 46 65 70 6d 35 43 54 4d 79 58 42 6e 65 54 36 67 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 48 36 4d 42 52 38 62 65 75 73 6c 7a 37 33 6a 79 33 [TRUNCATED] Data Ascii: router FREEWAY 31.220.74.133 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1iDARbDiYEymbu4Ja69TaVobpCECBYev3Kz2OkIRHOaab6yAQAgBAAfowFHxt66yXPvePLe4CONgoTFQTyQtiXrC5IjJELrk/T8MfdYMo/NI5dDJ2SY3ejOyYfHwkvbfkQV3WlR2ACjn/D1/AoUOxCQz/Y5IUSmdhksWZFepm5CTMyXBneT6gE=-----END ED25519 CERT-----master-key-ed25519 H6MBR8beuslz73jy3uAjjYKExUE8kLYl6wuSIyRC65Mplatform Tor 0.4.8.10 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 18:20:08fingerprint FE38 4392 C982 659A B28B 51FB 98C2 179B 5E8C E371uptime 7304799bandwidth 1073741824 1073741824 50485060extra-info-digest 18D4C29E489FE6A6D2F93F448494B997EA02C502 o1tS9GSW9Tvc75rT3ZmJqcG3SHx5041TIO3GqLzVV+sonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMowgJErPX2o8u8CntxxgRAlO3uiolfO03fGGNSbU/OmD+Q6TlOBLCTQVy51rIhg551TmcfkvDq9zHlqOj35PTwmL99PKzwd1KPPBUgUMAW1l0vOPAwuVS521+9X791HwAgTLp5Tc27r50VKQTr0yBU+WaZYO4CngxeRAKUT7 [TRUNCATED]
Nov 3, 2024 09:41:43.047499895 CET	1236	IN	Data Raw: 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 59 6c 54 79 63 32 34 52 4c 6b 77 34 35 4c 53 6f 46 6b 49 56 4d 53 36 48 41 32 47 46 Data Ascii: signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANYlTyc24RLkw45LSoFkIVMS6HA2GF+8yTOfp1pOY8STaZddPeDuHi3e9y0kGEVJFWNW4VmRzNASNZv8smiO8ugzM2qTw+XTRcjI/zWrlkOa3+86CWD0HY2OSqUEnCaT8SM8IlkVPEZGtyMObeDjdUUVYdvdIztOmSMGipdVShFHAgMBAAE=-----END
Nov 3, 2024 09:41:43.047508001 CET	113	IN	Data Raw: 4c 69 7a 61 50 6c 34 35 34 34 61 51 56 6c 70 2b 30 49 38 6b 6b 55 67 4d 6d 74 48 5a 37 45 61 72 53 63 67 78 4c 4b 33 44 58 67 4a 0a 4a 6b 43 6d 56 49 36 73 70 6b 50 33 6e 66 35 51 78 70 71 2b 74 4a 70 52 78 4e 75 59 62 56 6d 61 59 64 4f 44 6c 47 Data Ascii: LizaPl4544aQVlp+0I8kkUgMmtHZ7EarScgxLK3DXgJJkCmVI6spkP3nf5Qxpq+tJpRxNuYbVmaYdODlGDxYTg=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	193.23.244.244	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:44.509066105 CET	175	OUT	GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:45.573380947 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:45 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:45 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 34 35 2e 31 34 31 2e 32 31 35 2e 35 36 20 38 34 33 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 61 59 56 48 44 30 51 71 75 63 6c 6d 58 48 49 76 62 77 6c 64 43 45 49 59 4f 6f 36 59 6c 5a 37 50 7a 74 73 42 35 72 57 6d 30 43 65 41 51 41 67 42 41 42 59 4b 72 38 6d 0a 69 49 64 59 75 76 36 65 58 71 66 79 62 73 79 39 36 68 64 6b 57 69 51 63 37 31 51 68 55 6a 34 61 54 54 35 35 79 6b 78 45 67 66 45 36 38 6e 39 50 64 47 39 58 53 62 6c 35 2b 77 55 2f 49 50 38 43 0a 79 46 63 55 4b 56 46 37 49 6b 7a 41 42 73 6a 32 65 32 52 45 34 37 30 6a 52 6b 4c 36 77 74 63 6b 6b 71 73 58 78 4b 6a 75 39 59 70 44 76 33 63 4b 45 2f 5a 31 54 64 32 48 65 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 57 43 71 2f 4a 6f 69 48 57 4c 72 2b [TRUNCATED] Data Ascii: router Quetzalcoatl 45.141.215.56 8430 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAaYVHD0QquclmXHIvbwldCEIYOo6YlZ7PztsB5rWm0CeAQAgBABYKr8miIdYuv6eXqfybsy96hdkWiQc71QhUj4aTT55ykxEgfE68n9PdG9XSbl5+wU/IP8CyFcUKVF7IkzABsj2e2RE470jRkL6wtckkqsXxKju9YpDv3cKE/Z1Td2Hegg=-----END ED25519 CERT-----master-key-ed25519 WCq/JoiHWLr+nl6n8m7MveoXZFokHO9UIVI+Gk0+ecoor-address [2a12:a800:2:1:45:141:215:56]:8430platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:23:48fingerprint 5A7D E908 3BE6 228A 4339 55A4 649C 9865 C909 676Auptime 324066bandwidth 1073741824 1073741824 7290636extra-info-digest 865236792538F6B57AAE337CF4E02E067C9751FF sRTzbsfqZuyJF2Gvyllzvrxo4gE3M8qWYmDho/a1rO8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM7rdccbDS85i2LeGoAluJvxILf260QWFZvcDJhVdB3wS2JewPwi7rfjDRnTj5XXJc2Gm6PYCxjkByB/glW/IvbrfkQ+Y608Blbq04EEZvXwS1i/ACBgA1Ya [TRUNCATED]
Nov 3, 2024 09:41:45.573394060 CET	212	IN	Data Raw: 48 6d 68 78 5a 5a 4d 75 71 76 51 46 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 Data Ascii: HmhxZZMuqvQFAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL14+tqxvYaTEw9V1DasHGlbNVgSjQUSkOUnZ9sFctWhskzK4lwpminq7l40C3wc0UjDRSPavBd5PLfBg7uu3yEzj3mBX5usFbk5VlshkML/4Z
Nov 3, 2024 09:41:45.574269056 CET	1236	IN	Data Raw: 47 45 6c 65 53 2b 36 53 79 46 0a 51 57 4d 46 71 79 49 78 54 6e 50 74 45 49 67 36 72 66 45 35 46 43 4f 49 37 30 73 4b 43 34 55 38 6e 4e 30 58 31 42 71 6c 35 6d 41 71 35 37 46 43 39 74 66 66 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 Data Ascii: GEleS+6SyFQWMFqyIxTnPtEIg6rfE5FCOI70sKC4U8nN0X1Bql5mAq57FC9tffAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----rv8UkrFZ08xz0/CmMxAxRPkANDvqA6ZHvi0+vh3uLN7E+Y/MQ4ajE7UD2oPUlaU5LEPu1/LjvRfsjp+M5NazPcMISp14iAJ
Nov 3, 2024 09:41:45.574397087 CET	1236	IN	Data Raw: 35 39 37 41 35 31 44 33 41 31 43 42 46 38 20 24 30 43 46 34 38 36 39 36 46 30 30 34 34 38 32 43 34 34 35 44 38 37 35 42 45 33 37 36 41 35 38 45 33 44 36 36 30 34 39 37 20 24 30 44 37 36 36 31 41 33 33 45 42 39 43 41 34 34 42 45 43 33 31 30 39 44 Data Ascii: 597A51D3A1CBF8 $0CF48696F004482C445D875BE376A58E3D660497 $0D7661A33EB9CA44BEC3109DBEC7F9C5E8ABFB02 $0E2FF5BF873DF2FDBABE42DBF042D350DE794F15 $10C079B536D3F682F8A1BB882DED61182646D167 $10D5A1CC50849F63A91B3DF8068F806EE3532541 $127E803888D82F33C
Nov 3, 2024 09:41:45.574409962 CET	1236	IN	Data Raw: 37 46 31 35 32 45 41 46 45 46 38 42 39 39 41 42 46 34 32 46 42 45 32 45 44 34 36 38 32 46 35 41 36 33 43 46 43 37 20 24 32 43 31 39 39 33 30 35 30 42 33 32 44 38 32 37 45 43 36 46 44 31 32 34 44 42 30 37 35 34 36 42 37 38 45 33 31 41 46 46 20 24 Data Ascii: 7F152EAFEF8B99ABF42FBE2ED4682F5A63CFC7 $2C1993050B32D827EC6FD124DB07546B78E31AFF $2C26CBACAB3B83142A54637CA30FF130C9BD331F $2C7FBE61AA7F3C60691155E60030B031BFCC5FE3 $2C91D3E05A1FC5CBC720755E4836C08B5C6E04E0 $2D3473368BF4E65E9EB2CCE43D132EE7FAA
Nov 3, 2024 09:41:45.574419975 CET	1236	IN	Data Raw: 33 31 31 43 46 36 38 42 32 41 43 37 45 31 45 38 34 39 42 30 20 24 33 41 44 30 45 30 39 39 45 41 30 46 36 34 42 36 32 30 32 42 45 45 33 42 37 33 37 41 39 46 45 35 44 35 35 34 41 33 43 43 20 24 33 42 37 44 41 31 34 30 39 43 42 46 42 39 43 36 36 42 Data Ascii: 311CF68B2AC7E1E849B0 $3AD0E099EA0F64B6202BEE3B737A9FE5D554A3CC $3B7DA1409CBFB9C66B9F040D52DF6DAA329D71C4 $3D2D6927F1ACC04A1373C91C015946B3C4B08797 $3E36E355C3E0661BD9E72C24C3B5ACEF3568A31C $3EE11C45FDE23CC46E3C7BC8AFCACB8395B37411 $3EFA7B02596
Nov 3, 2024 09:41:45.574430943 CET	1236	IN	Data Raw: 35 35 20 24 35 31 36 39 31 43 37 39 32 36 42 31 33 34 41 42 35 38 32 46 33 34 38 39 44 32 33 41 39 35 45 35 39 44 43 33 34 37 30 43 20 24 35 31 39 37 32 33 32 30 46 35 46 32 37 38 45 46 44 31 34 36 37 39 34 33 41 39 42 37 30 41 37 33 32 30 37 41 Data Ascii: 55 $51691C7926B134AB582F3489D23A95E59DC3470C $51972320F5F278EFD1467943A9B70A73207A9298 $51D5A72A2C78D1372BE1CB1F3EE382C37763B1FF $51FAFEABB266B7E4E1EB4E6120DF2D7F719157EB $526AD50C9DE6AF533DEBE8F9BBDF149BC1F5AB6E $546629936518214DCFCF784E875D0
Nov 3, 2024 09:41:45.574443102 CET	1236	IN	Data Raw: 36 42 37 36 30 33 35 30 31 35 31 36 36 35 35 31 30 42 42 39 41 45 34 43 30 33 20 24 36 30 45 35 32 31 42 36 33 32 44 38 33 39 37 31 45 43 46 38 44 34 35 34 41 46 35 35 38 46 32 43 32 33 38 42 43 39 41 35 20 24 36 31 38 33 42 34 39 33 41 43 46 46 Data Ascii: 6B760350151665510BB9AE4C03 $60E521B632D83971ECF8D454AF558F2C238BC9A5 $6183B493ACFF41B28745CF0322E75AD7BDE4A48B $61A2104D7E69867C3F3EF981077266F968C1752A $6212040CE7774652B4F727940E6F632E015023DD $62500AB401F93558677C1E8C61E724BD466CE8A0 $646B4
Nov 3, 2024 09:41:45.574455023 CET	1236	IN	Data Raw: 36 37 39 41 35 35 35 38 20 24 37 34 31 33 36 37 35 45 44 32 35 32 42 32 39 33 39 35 35 36 45 44 30 30 39 38 43 33 39 38 33 44 31 41 46 33 31 39 31 41 20 24 37 34 35 31 30 37 41 36 35 31 42 43 46 45 34 39 37 43 32 31 31 44 34 45 43 39 33 38 35 33 Data Ascii: 679A5558 $7413675ED252B2939556ED0098C3983D1AF3191A $745107A651BCFE497C211D4EC93853B10E68F723 $74F49CD5F9E94EDBF1F8D8705B4C64E88C1CC344 $75508825246CE844F3DD603634AB75029C6EC52D $75ADD82FA44C8E7D76414148CFE5E1131CD2AD0D $7644B57DD86305F3B8172FE
Nov 3, 2024 09:41:45.574469090 CET	1236	IN	Data Raw: 31 42 45 35 34 36 36 39 35 35 39 42 38 32 31 36 35 39 36 34 42 38 44 37 39 44 41 38 30 31 31 39 20 24 38 42 33 30 46 45 45 45 33 37 39 30 41 34 30 30 36 33 41 41 46 38 45 37 31 45 43 38 37 37 33 46 37 31 46 42 36 30 42 46 20 24 38 42 36 37 33 32 Data Ascii: 1BE54669559B82165964B8D79DA80119 $8B30FEEE3790A40063AAF8E71EC8773F71FB60BF $8B67321D615A8487044C44722654285E6D3C5763 $8B70848F74BD5A90F6B9E0CB555E7D8C18FF325F $8BBA3623CD5404A8F173DC4CC9EBBE3B09D967F1 $8D1154214BD6151F0427D4A158E71D62E21E0766
Nov 3, 2024 09:41:45.578254938 CET	1236	IN	Data Raw: 42 31 43 36 46 43 33 42 36 35 41 33 34 31 20 24 39 41 31 31 45 34 42 34 36 44 43 35 33 45 31 33 30 34 33 42 39 46 43 31 45 42 41 46 45 30 31 32 38 44 36 39 39 42 35 38 20 24 39 44 31 33 41 39 43 31 41 35 43 42 35 32 32 46 30 32 32 38 41 43 35 42 Data Ascii: B1C6FC3B65A341 $9A11E4B46DC53E13043B9FC1EBAFE0128D699B58 $9D13A9C1A5CB522F0228AC5B4FF0C194659EDCA0 $A05274710647021786D6A234B9AA5C569C87C4B1 $A07B7614425A9716BB135CC502210209923659F8 $A0E3D391B83CED2F264CD6D39525E37775EA1EEB $A15676F5F0F2BA7B1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	45.66.35.11	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:47.275943041 CET	172	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:41:48.318787098 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:41:48 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:41:48 GMT Data Raw: 72 6f 75 74 65 72 20 46 72 65 65 45 78 69 74 20 31 37 39 2e 34 33 2e 31 35 39 2e 32 30 30 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 68 5a 41 64 76 53 4a 47 6b 62 67 72 41 44 2f 4a 6b 2b 58 4a 62 69 4e 6f 34 50 63 4b 46 49 68 36 6d 36 2f 33 7a 61 46 2b 41 75 77 50 47 72 41 51 41 67 42 41 43 4d 4c 6b 52 69 0a 67 61 66 30 6d 47 58 35 35 63 2b 32 31 51 4b 4d 75 53 6e 74 64 65 68 46 68 7a 30 71 65 30 50 53 4b 37 6d 44 63 65 4f 6a 46 52 48 48 37 76 4a 34 51 43 34 36 63 50 4e 50 47 59 43 4b 41 4b 7a 6b 0a 44 50 5a 33 5a 57 30 32 66 44 44 56 59 37 4c 59 43 32 6b 51 50 32 73 4d 4f 7a 52 53 76 7a 6d 67 78 75 42 41 56 58 75 72 2b 35 65 4f 4d 44 38 63 39 42 63 30 2b 50 53 58 51 51 49 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6a 43 35 45 59 6f 47 6e 39 4a 68 6c 2b 65 58 [TRUNCATED] Data Ascii: router FreeExit 179.43.159.200 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1hZAdvSJGkbgrAD/Jk+XJbiNo4PcKFIh6m6/3zaF+AuwPGrAQAgBACMLkRigaf0mGX55c+21QKMuSntdehFhz0qe0PSK7mDceOjFRHH7vJ4QC46cPNPGYCKAKzkDPZ3ZW02fDDVY7LYC2kQP2sMOzRSvzmgxuBAVXur+5eOMD8c9Bc0+PSXQQI=-----END ED25519 CERT-----master-key-ed25519 jC5EYoGn9Jhl+eXPttUCjLkp7XXoRYc9KntD0iu5g3Eplatform Tor 0.4.8.10 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 16:25:59fingerprint 5A82 9292 6C5E 5A24 6D35 B843 A729 42FC EC23 5BACuptime 25164563bandwidth 1073741824 1073741824 24652284extra-info-digest 4C82EBF85E068B895D9CED55064E5B5D2374C838 FCBswJVtO1JV5y9tvUpsJQYyDHYI0Q2dkns/ZcrEPBYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKlTxk7HZTUduzD+rhfkL0OgAbjljsB5K6xLQpBq5Av+4AE94c+faVg5zBkggYxFH2mXTrgXBGrA8yjzqrbY0iko5P712E14ljAoRD5AVkf1t85jGCopl1HSyRqndJbiG/sgglOWOHH1ltJNXsYVlObuxRNbeu5KcTca1P [TRUNCATED]
Nov 3, 2024 09:41:48.318799973 CET	764	IN	Data Raw: 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 42 70 70 46 4f 42 74 38 64 4f 45 73 75 4e 31 45 79 4a 30 62 70 79 6a 54 51 Data Ascii: ---signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMBppFOBt8dOEsuN1EyJ0bpyjTQdTBJJj3350JeI2dxZhcv7CUfyIS05jNOwHJ43aXXItaHy6lzZtD6gwd6rjd1pJdjQ29RtEcdT7o1fV38HOqg4xxTLhhebtEIhJGc1+R5+Ay5hN3GJnxywrZKXdWplh9VzjrTpFI0UftvhswxpAgMBAAE=-----
Nov 3, 2024 09:41:48.318814993 CET	1236	IN	Data Raw: 31 42 44 37 31 31 39 34 44 33 37 43 38 36 37 46 45 44 35 41 32 31 20 24 32 37 33 30 37 38 42 39 34 34 36 37 35 35 38 38 34 32 39 36 33 43 45 30 41 30 32 42 32 44 30 35 38 45 32 38 32 34 45 39 20 24 32 37 43 35 43 46 43 39 41 30 43 44 38 43 31 32 Data Ascii: 1BD71194D37C867FED5A21 $273078B94467558842963CE0A02B2D058E2824E9 $27C5CFC9A0CD8C12034BCE47D21E68ABC98A360E $5A8292926C5E5A246D35B843A72942FCEC235BAC $617C95FCF5F00E98E73E35A71C066ED20614F26D $68A54E180F778AFE96C7906A528B1EFEDFD42A47 $6F77E95EF
Nov 3, 2024 09:41:48.318828106 CET	900	IN	Data Raw: 38 32 0a 61 63 63 65 70 74 20 2a 3a 32 30 38 33 0a 61 63 63 65 70 74 20 2a 3a 32 30 38 36 2d 32 30 38 37 0a 61 63 63 65 70 74 20 2a 3a 32 30 39 35 2d 32 30 39 36 0a 61 63 63 65 70 74 20 2a 3a 32 31 30 32 2d 32 31 30 34 0a 61 63 63 65 70 74 20 2a Data Ascii: 82accept :2083accept :2086-2087accept :2095-2096accept :2102-2104accept :3128accept :3389accept :3690accept :4321accept :4643accept :5050accept :5190accept :5222-5223accept :5228accept :5900accept *:6660-6669accep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	45.66.35.11	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:49.743562937 CET	172	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	193.23.244.244	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:50.810271978 CET	175	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	193.23.244.244	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:51.876755953 CET	175	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	216.218.219.41	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:59.040144920 CET	175	OUT	GET /tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	45.66.35.11	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:41:59.805301905 CET	172	OUT	GET /tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49757	193.23.244.244	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:00.852237940 CET	175	OUT	GET /tor/server/fp/9c1e47ff205f349d69d569ae7ed15366a5554a46 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	45.66.35.11	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:03.590379953 CET	172	OUT	GET /tor/server/fp/dee68ec30b95b475f5c9b0a53f39084ca063d5d8 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49760	216.218.219.41	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:04.654105902 CET	175	OUT	GET /tor/server/fp/dee68ec30b95b475f5c9b0a53f39084ca063d5d8 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	45.66.35.11	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:05.419658899 CET	172	OUT	GET /tor/server/fp/dee68ec30b95b475f5c9b0a53f39084ca063d5d8 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:06.517139912 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:06 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:06 GMT Data Raw: 72 6f 75 74 65 72 20 54 68 65 53 68 61 64 6f 77 20 34 36 2e 32 33 2e 31 30 38 2e 31 39 35 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 65 62 41 64 6b 55 5a 75 73 35 63 43 6e 6b 54 62 78 43 6c 59 34 6e 78 2b 5a 6c 47 56 46 36 67 57 51 4c 4a 71 46 69 65 33 6c 73 51 30 44 6f 41 51 41 67 42 41 43 6e 6d 71 35 31 0a 76 65 57 75 70 46 34 46 67 48 69 61 51 37 47 37 59 68 6b 44 4c 79 66 52 51 61 45 6c 4b 56 54 6d 35 66 50 67 33 4d 74 30 4a 72 70 74 72 78 72 7a 30 64 48 61 4a 62 4f 64 4d 65 48 54 39 33 45 77 0a 6b 44 34 53 68 55 70 78 4a 76 78 68 79 61 6a 66 30 6a 78 63 43 6e 36 7a 58 61 43 4d 5a 48 71 33 59 73 6d 2f 5a 42 4f 45 57 4c 51 55 66 6f 59 74 65 70 57 32 75 2f 46 6a 78 41 6f 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 70 35 71 75 64 62 33 6c 72 71 52 65 42 59 42 [TRUNCATED] Data Ascii: router TheShadow 46.23.108.195 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1ebAdkUZus5cCnkTbxClY4nx+ZlGVF6gWQLJqFie3lsQ0DoAQAgBACnmq51veWupF4FgHiaQ7G7YhkDLyfRQaElKVTm5fPg3Mt0Jrptrxrz0dHaJbOdMeHT93EwkD4ShUpxJvxhyajf0jxcCn6zXaCMZHq3Ysm/ZBOEWLQUfoYtepW2u/FjxAo=-----END ED25519 CERT-----master-key-ed25519 p5qudb3lrqReBYB4mkOxu2IZAy8n0UGhJSlU5uXz4Nwplatform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 21:44:12fingerprint DEE6 8EC3 0B95 B475 F5C9 B0A5 3F39 084C A063 D5D8uptime 2606500bandwidth 5324800 21299200 6662636extra-info-digest D98CBAF13155BD7E61DF65AD6F8BF151DE70F9A2 /W+aQCI/nNIDdr99TRl0bQoWKrxldjl9ydojyWqCnEYonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAOZmQx9MhJVNDvPprr3XKE1SWzTtRvVtlV0z/fhBQhtaX2GH2G7/TygId+/YUQtvUQSxV1Sqvk0TIffKLqFkNZDGfkPjYGL6g+ooaIjwGH9iEF3batip1B2pBm1uV8CkWVwk5dArzwnmpeeoTSo2a+NjRIMCBMZUc0auujpsUkbdA [TRUNCATED]
Nov 3, 2024 09:42:06.517218113 CET	1168	IN	Data Raw: 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4b 35 43 68 55 42 4d 49 74 36 43 73 48 36 53 74 77 67 74 34 57 59 4a 75 73 41 7a 6d 44 79 52 49 4b Data Ascii: ning-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK5ChUBMIt6CsH6Stwgt4WYJusAzmDyRIKuGNEBDSBzki7nvMrrZ5S8BZVD0mJQU1eamrG/0OUPLW98k6PWytLm1bDt3kwSY6TVccojRwxQjZvMJxGALsUt9jhWNPKk63+a/4SFnbcfOKoyCgQguhKO7xSqcdwgUV1bErphd4kkhAgMBAAE=-----END RSA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	193.23.244.244	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:06.979283094 CET	175	OUT	GET /tor/server/fp/03ccd8c021b75030122b48e5665a86e199ec989c HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49764	45.66.35.11	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:08.046730042 CET	172	OUT	GET /tor/server/fp/03ccd8c021b75030122b48e5665a86e199ec989c HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49765	193.23.244.244	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:09.139817953 CET	175	OUT	GET /tor/server/fp/03ccd8c021b75030122b48e5665a86e199ec989c HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49766	193.23.244.244	80	2144	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:09.607781887 CET	175	OUT	GET /tor/server/fp/0bf417f376e3b950eb6811bf89b89fb417a203c3 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49768	193.23.244.244	80	2144	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:10.698968887 CET	175	OUT	GET /tor/server/fp/0bf417f376e3b950eb6811bf89b89fb417a203c3 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49769	45.66.35.11	80	2144	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:11.746217012 CET	172	OUT	GET /tor/server/fp/0bf417f376e3b950eb6811bf89b89fb417a203c3 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49770	216.218.219.41	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:11.935818911 CET	175	OUT	GET /tor/server/fp/3c18fb5dbbcf6c9ecedee0cb02fb89bc49ad7bbd HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:13.185955048 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:13 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:13 GMT Data Raw: 72 6f 75 74 65 72 20 74 65 6c 65 67 72 61 6d 20 36 35 2e 32 31 2e 31 37 32 2e 31 33 33 20 39 30 30 34 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 5a 58 41 55 47 44 5a 61 75 6d 61 4f 75 42 39 7a 76 4a 79 47 41 79 48 52 59 6d 37 36 31 37 65 51 70 76 31 59 48 6e 56 77 76 43 56 35 57 6c 41 51 41 67 42 41 44 39 6c 5a 6c 46 0a 58 62 77 58 31 41 53 4a 33 79 76 71 53 73 63 70 70 50 65 46 63 56 53 52 35 53 70 63 49 79 51 69 68 6f 61 50 72 77 55 7a 4f 6c 6d 76 46 6d 46 5a 6f 33 4a 41 57 4d 44 67 65 4d 62 6b 51 32 52 50 0a 4e 6f 71 62 53 6e 75 45 66 42 4c 56 55 2b 4c 2b 30 52 30 43 6c 4e 34 6b 4d 32 47 78 36 4e 53 35 32 77 64 65 45 41 30 78 5a 65 7a 50 73 56 70 74 57 7a 47 6d 39 33 6f 38 4e 77 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 2f 5a 57 5a 52 56 32 38 46 39 51 45 69 64 38 72 [TRUNCATED] Data Ascii: router telegram 65.21.172.133 9004 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1ZXAUGDZaumaOuB9zvJyGAyHRYm7617eQpv1YHnVwvCV5WlAQAgBAD9lZlFXbwX1ASJ3yvqSscppPeFcVSR5SpcIyQihoaPrwUzOlmvFmFZo3JAWMDgeMbkQ2RPNoqbSnuEfBLVU+L+0R0ClN4kM2Gx6NS52wdeEA0xZezPsVptWzGm93o8NwE=-----END ED25519 CERT-----master-key-ed25519 /ZWZRV28F9QEid8r6krHKaT3hXFUkeUqXCMkIoaGj68platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 08:31:35fingerprint 3C18 FB5D BBCF 6C9E CEDE E0CB 02FB 89BC 49AD 7BBDuptime 1750861bandwidth 1073741824 1073741824 35618487extra-info-digest 38473B80C8D79B0FCD8BC12D21D990AA9B32F6EF AWQKARxdraBj/GOinxtXuFlCJ+t39I2kDrw4vItz6gQonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALv67xLBtoQ/qU8/PmcbtyQlm9PiBNYtbc0MWZuDgCSsPoZNSrPAwjzKmTsIcMA4gd3BQImccacHnDutF5PACE38n7OXPc6qe+8kPsFu0yMUW9GpxKRcG4otU13O9QFw3GO2r1eXvZcFSnBxgh2Z0D65mPKw+ARSLoWGMYHR [TRUNCATED]
Nov 3, 2024 09:42:13.185971022 CET	1236	IN	Data Raw: 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 38 30 54 4a 2f 31 74 7a 46 36 6c 6f 2f 54 34 50 68 58 4b 6f 48 4b 67 43 30 48 42 Data Ascii: -signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM80TJ/1tzF6lo/T4PhXKoHKgC0HBnNt57In3+UQvR+egPr2KhdUrcvisBY26F9xwrpVE4wBBe8miyyi8lZjTCLkWBVFuQaxbwhGaIwJvnV9vaalkvRedxjhJNeEb7Udx9KnexEPYotXFsyNNvbuXaDgClfXOJ12Mag0sLcYh0zNAgMBAAE=-----EN
Nov 3, 2024 09:42:13.185982943 CET	192	IN	Data Raw: 33 6f 33 77 67 70 52 43 2f 6c 7a 43 36 76 57 68 62 34 43 42 45 4b 77 6b 74 71 55 6c 6c 59 6b 4e 45 4d 73 4e 30 30 51 75 6f 62 45 31 6e 78 4d 33 6d 37 41 4b 6c 64 68 6b 56 0a 45 35 4a 4e 4c 56 73 65 78 33 33 79 71 2f 4c 30 6c 30 5a 6d 73 67 75 44 Data Ascii: 3o3wgpRC/lzC6vWhb4CBEKwktqUllYkNEMsN00QuobE1nxM3m7AKldhkVE5JNLVsex33yq/L0l0ZmsguDJaLOxLVNsRRs4q78sZW++bmpOFyTmeTqKsYyNLWMAwC3KUZjX52ZkZSLdzAeZ0Z5OpMRV60wPBEtc8xvpMU=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49829	45.66.35.11	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:28.768656969 CET	172	OUT	GET /tor/server/fp/a9e497f8d7038ac2068624917102eddc76f70c38 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:29.811069012 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:29 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:29 GMT Data Raw: 72 6f 75 74 65 72 20 4d 6f 6f 45 78 69 74 37 20 34 35 2e 31 34 31 2e 32 31 35 2e 31 31 36 20 39 30 30 37 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 64 2f 41 65 4d 77 55 64 37 41 72 32 57 36 4d 34 33 58 72 4a 4e 71 6d 53 4c 69 59 78 76 31 64 2f 62 75 66 31 38 4a 78 69 57 2f 76 67 4f 6a 41 51 41 67 42 41 42 61 2f 64 38 61 0a 61 57 6a 47 38 6e 48 4c 58 64 73 68 4a 50 53 75 30 30 6f 64 43 4e 30 73 30 50 33 56 7a 43 33 48 69 59 77 37 7a 4f 4e 33 32 66 74 66 75 35 31 4e 36 76 63 78 6f 47 63 38 57 4c 47 68 66 39 33 46 0a 32 30 5a 64 43 4f 30 68 6a 78 56 42 58 62 36 76 33 56 72 74 70 38 42 78 67 55 48 77 30 36 44 53 68 44 4d 36 55 69 63 33 78 79 64 47 73 50 37 73 44 43 7a 6b 4a 37 78 66 4b 51 34 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 57 76 33 66 47 6d 6c 6f 78 76 4a 78 79 31 33 [TRUNCATED] Data Ascii: router MooExit7 45.141.215.116 9007 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1d/AeMwUd7Ar2W6M43XrJNqmSLiYxv1d/buf18JxiW/vgOjAQAgBABa/d8aaWjG8nHLXdshJPSu00odCN0s0P3VzC3HiYw7zON32ftfu51N6vcxoGc8WLGhf93F20ZdCO0hjxVBXb6v3Vrtp8BxgUHw06DShDM6Uic3xydGsP7sDCzkJ7xfKQ4=-----END ED25519 CERT-----master-key-ed25519 Wv3fGmloxvJxy13bIST0rtNKHQjdLND91cwtx4mMO8wor-address [2a12:a800:2:1:45:141:215:116]:9007platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 16:46:29fingerprint A9E4 97F8 D703 8AC2 0686 2491 7102 EDDC 76F7 0C38uptime 1951759bandwidth 1073741824 1073741824 12453313extra-info-digest B2FEE188BF7F9C6D8D0899AB7575B7096BBCEAF0 LY40NVBnTVd7FdpCvm+XnlYpyxxDkogqaSI+QcNXMTgonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMj43H9dn0+uQ7mBWbj0Huhept8R7aiu2nKkpAOTeQGUaHNmmfRr/dQ/w7E31wOFhLFW+lmAd8qCRF4a4swlwwMTYHoDa5je0JD3S1lcfXvrM8Ww4uVcz6g5 [TRUNCATED]
Nov 3, 2024 09:42:29.811089039 CET	1236	IN	Data Raw: 4e 62 6c 31 6d 6f 4c 70 56 4f 6a 4e 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 Data Ascii: Nbl1moLpVOjNAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL5Mc+uQ76QT+5vJbjVv6Gu6EQ2CGlpl5bznxjaoH9nyEAJc1FKYmixTqW6lnEa5c+TJ2S1qzuX76p7qulg1pmrSjRn7LSJ5+LF6fRLhoATWJ07K47VR/m+zQi71jDGPSdzFcsSXrL7y
Nov 3, 2024 09:42:29.811100006 CET	747	IN	Data Raw: 34 4d 72 51 58 65 53 70 55 47 73 59 6b 35 48 4b 4c 70 65 75 68 54 5a 4b 4d 57 38 4d 74 58 75 58 78 68 4e 6f 62 38 72 51 51 42 72 6b 52 6a 34 37 31 5a 76 34 5a 4e 6f 43 75 36 74 65 59 77 73 4d 79 34 32 48 7a 6e 4c 70 36 67 72 43 74 31 41 55 44 43 Data Ascii: 4MrQXeSpUGsYk5HKLpeuhTZKMW8MtXuXxhNob8rQQBrkRj471Zv4ZNoCu6teYwsMy42HznLp6grCt1AUDCrWntor-onion-key FaOsndrR46DSfJ4mLYH3zjbl+G0pnuVXfptM1qQDGBgreject 0.0.0.0/8:reject 169.254.0.0/16:reject 127.0.0.0/8:reject 192.168.0.0/16:reject 10.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49836	193.23.244.244	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:30.315917969 CET	175	OUT	GET /tor/server/fp/e0ec6db18ca367fe6d8478d32d760346e1c43f15 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49842	216.218.219.41	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:31.379690886 CET	175	OUT	GET /tor/server/fp/e0ec6db18ca367fe6d8478d32d760346e1c43f15 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:32.140506029 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:32 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:32 GMT Data Raw: 72 6f 75 74 65 72 20 46 6f 72 50 72 69 76 61 63 79 4e 45 54 20 31 38 35 2e 32 32 30 2e 31 30 31 2e 35 36 20 31 30 30 35 36 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 65 47 41 5a 63 46 2f 52 63 37 41 35 2f 41 43 32 6a 53 79 70 45 39 44 77 41 72 53 43 64 33 6f 43 61 54 6b 7a 59 32 2b 33 39 4b 62 67 68 79 41 51 41 67 42 41 41 66 4b 56 51 6f 0a 2f 42 43 74 6a 54 79 4b 33 65 57 35 72 76 30 37 37 31 46 6c 61 59 6e 62 41 78 64 63 53 52 56 57 47 51 70 71 65 76 43 70 4e 6b 54 63 43 56 6a 30 59 43 62 4e 70 34 2b 4a 64 68 4f 49 42 68 50 79 0a 59 4e 78 79 2b 52 49 6b 68 70 6c 72 62 50 6a 70 4c 4a 50 4d 2f 74 75 74 66 39 53 76 65 6b 57 77 75 4f 37 71 37 72 76 64 43 63 79 53 6b 6b 58 50 38 51 64 63 31 4d 35 68 4c 41 38 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 48 79 6c 55 4b 50 77 51 72 [TRUNCATED] Data Ascii: router ForPrivacyNET 185.220.101.56 10056 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1eGAZcF/Rc7A5/AC2jSypE9DwArSCd3oCaTkzY2+39KbghyAQAgBAAfKVQo/BCtjTyK3eW5rv0771FlaYnbAxdcSRVWGQpqevCpNkTcCVj0YCbNp4+JdhOIBhPyYNxy+RIkhplrbPjpLJPM/tutf9SvekWwuO7q7rvdCcySkkXP8Qdc1M5hLA8=-----END ED25519 CERT-----master-key-ed25519 HylUKPwQrY08it3lua79O+9RZWmJ2wMXXEkVVhkKanoor-address [2a0b:f4c2:2::56]:10056platform Tor 0.4.9.0-alpha-dev on Linuxproto Conflux=1 Cons=1-2 Desc=1-3 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-3 Padding=2 Relay=2-4published 2024-11-03 03:30:21fingerprint E0EC 6DB1 8CA3 67FE 6D84 78D3 2D76 0346 E1C4 3F15uptime 78925bandwidth 104857600 209715200 27726848extra-info-digest E6039E4BD43DC5463C95D42697B80A33B3078CA8 K7bsHiYUkGnIDcGwXaXavPUxf3CLuqdx5g17yS1l9dkonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMLIK7wbG1uyIu+A2Mk4xvKAJrIfyOVUVgXPSuUMFwnUADtCUOUNnSEV1EHWG6PUDIw0Z0P+bKUMEDzhGV2r1uDSvvSaM2NaJBlSyPN7ChPT8fw2kJNkcdg6Q [TRUNCATED]
Nov 3, 2024 09:42:32.140583038 CET	764	IN	Data Raw: 6e 65 33 78 43 34 37 6e 66 57 6a 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 Data Ascii: ne3xC47nfWjAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMYvdjtIgFWYGtzkk2kiFhg+wyCNrJZCVvc9MFlot9g902w57yRmDebbx/SIpP1hwrrzqm8wjLeugoxDTKvIfb7klZpUWDts17NbbvB04fUhICHQW8p/u4SnO0R4A9YMiOwZIeS9EdZ14
Nov 3, 2024 09:42:32.140595913 CET	1236	IN	Data Raw: 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 30 30 33 36 46 41 33 36 41 42 34 33 35 46 44 35 44 30 46 36 34 30 36 32 36 36 33 36 38 36 37 45 42 46 42 37 32 43 36 38 20 24 30 34 37 34 39 43 44 36 41 36 42 45 31 Data Ascii: ED25519 CERT-----family $0036FA36AB435FD5D0F640626636867EBFB72C68 $04749CD6A6BE1C0B14EE63DFD0F13EEB9EFEE8AB $0E4F190C4A6F7DDF7F8C9A7842B85B4BBCF5F44B $11A2C7E4629BC8F2AE8188CFF6421F1FBDD2A8CE $1694A8CD4564D987C59D8A17D74F153ED967AC0C $18671D
Nov 3, 2024 09:42:32.140608072 CET	1236	IN	Data Raw: 32 41 39 46 41 38 44 20 24 36 45 30 44 46 30 41 35 42 37 46 33 46 46 46 42 34 35 45 31 41 41 30 37 38 44 31 33 36 46 35 44 45 42 44 32 32 38 41 42 20 24 36 45 31 36 44 33 38 43 35 41 43 31 37 30 45 35 36 30 38 38 31 37 42 36 36 36 32 35 43 35 46 Data Ascii: 2A9FA8D $6E0DF0A5B7F3FFFB45E1AA078D136F5DEBD228AB $6E16D38C5AC170E5608817B66625C5F34F21D96E $700656570DF73C4FC4059FEF2F7DE08B2721E409 $776542D611661D6FE3839FE2D7AFB92A435C5D81 $7ABED1F6664D1153F1402838D3B32AF6F2CABE17 $7C1A1517C27A0C68329D84D9
Nov 3, 2024 09:42:32.140620947 CET	424	IN	Data Raw: 37 45 35 45 31 35 43 42 38 41 37 44 45 44 46 38 39 36 30 30 44 44 30 37 33 44 41 37 35 44 34 20 24 42 36 34 39 43 41 45 41 37 43 41 30 33 42 43 31 37 38 32 32 36 30 41 39 33 33 44 41 42 32 35 43 33 39 31 46 35 43 31 41 20 24 42 37 45 39 38 34 39 Data Ascii: 7E5E15CB8A7DEDF89600DD073DA75D4 $B649CAEA7CA03BC1782260A933DAB25C391F5C1A $B7E9849D446FC57D4BDED937B8E17F3AACE1FA06 $B8AC259D400172997D08120B3BD5A4090841B06F $BC06A4AE847DDC23FD63082E388BB30924DAB4B6 $BD2A34ADE4E603A272FAAD23AEF389801BB223BB $
Nov 3, 2024 09:42:32.140635967 CET	1236	IN	Data Raw: 30 46 35 39 32 43 42 41 46 46 37 43 37 39 42 44 38 31 31 35 33 42 31 42 35 46 35 20 24 43 37 41 30 31 36 45 31 46 38 35 43 46 37 44 44 37 33 39 31 34 41 45 34 30 46 35 35 42 37 31 38 33 44 31 31 42 38 46 44 20 24 44 30 30 37 39 35 33 33 30 44 37 Data Ascii: 0F592CBAFF7C79BD81153B1B5F5 $C7A016E1F85CF7DD73914AE40F55B7183D11B8FD $D00795330D77C75344C54FB8800531FAB3C40FBE $D218561DA59F093AB94A22620E063ECE87381575 $D2ADD68BA9F735031893CB8A58548375E831B45B $D80F649226CC96BBE0FF7B45B3791901569FE5AC $E0EC
Nov 3, 2024 09:42:32.140647888 CET	603	IN	Data Raw: 2e 31 35 31 3a 2a 0a 72 65 6a 65 63 74 20 31 37 32 2e 36 37 2e 37 30 2e 31 31 39 3a 2a 0a 72 65 6a 65 63 74 20 38 31 2e 32 30 31 2e 36 30 2e 31 33 30 3a 2a 0a 72 65 6a 65 63 74 20 32 30 2e 31 39 30 2e 31 35 39 2e 30 2f 32 34 3a 2a 0a 72 65 6a 65 Data Ascii: .151:reject 172.67.70.119:reject 81.201.60.130:reject 20.190.159.0/24:reject 20.190.160.0/24:reject 40.126.31.0/24:reject 40.126.32.0/24:reject 66.206.15.148:reject :22reject :25accept :ipv6-policy reject 22,25tunnelled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49903	193.23.244.244	80	2144	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:45.598459005 CET	175	OUT	GET /tor/server/fp/ce4005e2df2d752070acad2f6e1c853cb9d30c16 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:46.674546957 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:46 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:46 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 32 2e 35 38 2e 35 36 2e 33 35 20 39 30 30 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 53 2f 64 37 4b 72 51 48 6f 6e 63 38 50 75 2b 66 64 58 6a 45 36 62 6f 47 4e 64 54 58 6c 44 35 61 66 57 77 2b 73 31 78 69 7a 49 77 41 51 41 67 42 41 44 51 34 64 4c 56 0a 6e 4e 6f 4f 5a 4f 57 6f 45 50 6a 32 57 57 77 33 78 41 5a 67 36 72 43 2b 6b 57 54 6a 74 4f 45 43 4a 52 76 71 4b 33 45 77 44 37 6f 30 4a 6d 55 34 54 72 6f 51 74 4f 30 45 4f 53 61 4f 6d 79 64 68 0a 43 65 47 69 70 75 6f 7a 2b 79 79 5a 48 61 2b 31 36 64 77 51 4f 30 63 43 43 76 54 4f 50 36 34 4a 45 47 6e 51 69 6c 49 57 43 4e 7a 73 42 34 48 43 57 65 57 6a 30 6a 4c 37 63 51 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 30 4f 48 53 31 5a 7a 61 44 6d 54 6c 71 42 44 [TRUNCATED] Data Ascii: router Quetzalcoatl 2.58.56.35 9000 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAS/d7KrQHonc8Pu+fdXjE6boGNdTXlD5afWw+s1xizIwAQAgBADQ4dLVnNoOZOWoEPj2WWw3xAZg6rC+kWTjtOECJRvqK3EwD7o0JmU4TroQtO0EOSaOmydhCeGipuoz+yyZHa+16dwQO0cCCvTOP64JEGnQilIWCNzsB4HCWeWj0jL7cQA=-----END ED25519 CERT-----master-key-ed25519 0OHS1ZzaDmTlqBD49llsN8QGYOqwvpFk47ThAiUb6isor-address [2a12:a800:1:1:2:58:56:35]:9000platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 21:45:26fingerprint CE40 05E2 DF2D 7520 70AC AD2F 6E1C 853C B9D3 0C16uptime 324025bandwidth 1073741824 1073741824 8046872extra-info-digest 96BD537762DC50DF530047FD143082D35ABE21E0 TpcBsoI/zyZL8pa8Ia+TZ/2neHZ/M5awszAcN7MlHvAonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMW3rvbtbrb4K5nUqhvi9KeU8Qd0sOfV+7TcfwHGCZCf0WaWY/eOKTeKTk/Fj9q4cFRxwRhFdamllhfWLrE8ouNo2bUGBklMioL5CWfxnfTjfeK5V8jMXpv+JL3lXN [TRUNCATED]
Nov 3, 2024 09:42:46.674572945 CET	1236	IN	Data Raw: 4a 6d 4a 41 73 70 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d Data Ascii: JmJAspAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKxBX6dFu+QkgvzB085CDMNnzaGvxfvAG5U2CkgLeEWNosXTAra7n2O8cCJYfpp0ZhN+AJeFM663fFCL7MoTf4Y2y7Bjeab4QCWpwUSNxo8Cj4zR7yUfJ6K4Y105MipyD/Io9QwdJwSiWw5kWl
Nov 3, 2024 09:42:46.674586058 CET	424	IN	Data Raw: 46 44 38 30 36 41 45 38 35 35 20 24 30 41 46 39 38 32 43 43 37 31 41 30 31 44 39 35 45 38 39 35 39 44 37 36 33 44 30 45 43 30 45 35 41 36 43 36 31 32 34 34 20 24 30 42 35 42 43 37 36 42 33 42 45 37 35 35 33 42 32 32 39 46 44 33 45 37 33 46 32 36 Data Ascii: FD806AE855 $0AF982CC71A01D95E8959D763D0EC0E5A6C61244 $0B5BC76B3BE7553B229FD3E73F26AED41C31DD19 $0B8EF5F5016926F4245350FB37914E30BF36C528 $0CD666F9C9A40A8CFB1E6B9465597A51D3A1CBF8 $0CF48696F004482C445D875BE376A58E3D660497 $0D7661A33EB9CA44BEC31
Nov 3, 2024 09:42:46.674633980 CET	1236	IN	Data Raw: 38 38 33 31 43 42 20 24 31 33 30 43 46 43 46 33 38 42 41 33 33 32 37 45 33 30 30 31 41 31 44 42 32 41 34 42 35 41 43 42 44 41 45 32 34 38 44 39 20 24 31 33 43 41 44 43 39 45 30 39 46 33 30 41 46 32 34 41 39 38 42 34 34 45 38 38 33 32 33 44 42 36 Data Ascii: 8831CB $130CFCF38BA3327E3001A1DB2A4B5ACBDAE248D9 $13CADC9E09F30AF24A98B44E88323DB655A803E9 $13FBC97516DC854399E70BC7CA9A4513FFD4F08C $140E4FC6202FE17F46337058FC9848FA9055482B $149E584199DAD5966FADAA07F4652EB15E9FC658 $15450640183D6488AFEFA8B50
Nov 3, 2024 09:42:46.674645901 CET	1236	IN	Data Raw: 46 34 45 36 35 45 39 45 42 32 43 43 45 34 33 44 31 33 32 45 45 37 46 41 41 46 33 30 39 33 20 24 32 45 43 35 45 45 33 34 38 42 44 38 44 39 44 32 45 35 31 38 42 32 43 41 45 41 39 43 36 37 31 45 32 44 35 46 37 37 41 36 20 24 32 45 46 33 46 31 39 34 Data Ascii: F4E65E9EB2CCE43D132EE7FAAF3093 $2EC5EE348BD8D9D2E518B2CAEA9C671E2D5F77A6 $2EF3F194E34705F9E13021BAC7B394653329243A $2EFC2B8BC724CF435C14066087936BE7CA3C57A3 $305AD0AF362C5FF406FA1C228B2A2B2B774F0B78 $30C472441D910A8BCDA571F2637C80119E76D082 $3
Nov 3, 2024 09:42:46.674655914 CET	1236	IN	Data Raw: 43 42 38 33 39 35 42 33 37 34 31 31 20 24 33 45 46 41 37 42 30 32 35 39 36 39 31 36 43 41 37 46 46 35 39 43 37 41 33 41 37 41 38 41 38 44 35 36 42 37 41 31 45 38 20 24 33 46 33 38 43 31 37 43 31 31 42 34 33 35 36 32 37 36 36 42 35 30 41 39 35 33 Data Ascii: CB8395B37411 $3EFA7B02596916CA7FF59C7A3A7A8A8D56B7A1E8 $3F38C17C11B43562766B50A95366B021CBCC7ADA $3F6E66FDA54B0CED35F01A16AF5D034DDDD8D48C $409BD5AEC15BF5D2B983C6F064D852B0ADE0C8BD $410C2D96F0749813FDBBB15D079FC03BAEF6BFD1 $42708A12892506EBCD8
Nov 3, 2024 09:42:46.674668074 CET	1236	IN	Data Raw: 32 39 39 33 36 35 31 38 32 31 34 44 43 46 43 46 37 38 34 45 38 37 35 44 30 45 42 45 35 32 45 30 35 35 32 44 20 24 35 34 36 38 37 44 35 39 46 38 43 38 44 39 30 30 35 36 43 41 39 34 38 34 39 39 37 30 42 33 36 32 44 41 33 38 35 44 41 44 20 24 35 35 Data Ascii: 29936518214DCFCF784E875D0EBE52E0552D $54687D59F8C8D90056CA94849970B362DA385DAD $552C2E2AFDD1B740A38CA9768C51EC011B2AF701 $555A6B7CB3D8ECA376B4CB6701596A7B211E21D3 $56D878C942CD38F5287079974950668B18ECC4CD $5756D9C403D89B79AFE69D50BB0682BA31831
Nov 3, 2024 09:42:46.675239086 CET	1236	IN	Data Raw: 38 46 33 43 42 42 38 46 43 44 34 30 42 45 37 45 42 35 20 24 36 34 44 39 30 39 35 39 45 35 30 44 35 39 33 44 38 30 41 43 44 30 45 32 39 41 32 42 45 39 30 35 31 45 42 36 36 45 45 41 20 24 36 35 36 42 41 36 43 30 30 42 32 31 44 42 30 38 36 36 31 31 Data Ascii: 8F3CBB8FCD40BE7EB5 $64D90959E50D593D80ACD0E29A2BE9051EB66EEA $656BA6C00B21DB086611171C946288A29E2DF5BC $659B0645A1C264D9D8FF4C9DD2B08ADAC392D475 $65A398E9A697A4645937B086CDA1D9A5C57B9509 $676C3E3C42829851B709086CC6500B2ECA80C459 $68C3B540E5D15
Nov 3, 2024 09:42:46.675250053 CET	1236	IN	Data Raw: 20 24 37 37 33 31 33 43 33 32 41 41 34 38 41 42 36 35 38 32 39 39 44 41 30 33 39 44 46 36 43 36 32 37 43 31 32 36 46 35 37 30 20 24 37 37 44 35 33 46 38 43 39 35 34 35 44 31 45 36 41 34 44 33 35 33 32 45 39 45 32 44 38 34 37 34 34 36 30 39 33 33 Data Ascii: $77313C32AA48AB658299DA039DF6C627C126F570 $77D53F8C9545D1E6A4D3532E9E2D8474460933B9 $799F36F3EAD423C23E76351154E0BC98E8B498FE $7B9608D3B65C10061C8546839DD878ADAD91A83D $7BD416652010B7C42202BE40F749A417003ECD2C $7C6686190CE6E8A0A1A5B5B845BF3F1
Nov 3, 2024 09:42:46.675261974 CET	1236	IN	Data Raw: 31 36 30 35 44 35 39 46 38 32 44 38 41 44 35 38 46 37 45 41 36 43 43 35 20 24 38 45 45 44 41 33 34 43 45 36 44 36 45 36 30 35 45 44 33 31 37 39 32 37 38 46 34 35 38 38 32 36 35 34 39 32 33 32 38 30 20 24 39 30 38 35 37 45 30 42 35 39 31 32 30 36 Data Ascii: 1605D59F82D8AD58F7EA6CC5 $8EEDA34CE6D6E605ED3179278F45882654923280 $90857E0B5912063AF8770D0C244224697C5BD877 $90A83D3A6D53619211909E96EDC30C910676A32B $9112E190D8FD4ED1266399C96537620BF3700E7B $9180840F6BFF235CA7F4A51BEC46075B5A5B1509 $9247B54
Nov 3, 2024 09:42:46.679596901 CET	1236	IN	Data Raw: 31 42 44 33 36 46 20 24 41 35 42 42 43 32 43 36 31 42 31 46 36 42 30 39 30 39 37 30 31 31 43 34 43 45 35 36 42 42 45 35 37 44 45 35 41 43 39 32 20 24 41 36 31 39 31 46 33 39 34 39 43 33 33 39 32 33 39 32 33 42 35 43 43 41 33 36 36 33 42 34 38 33 Data Ascii: 1BD36F $A5BBC2C61B1F6B09097011C4CE56BBE57DE5AC92 $A6191F3949C33923923B5CCA3663B483FA37E7B9 $A84AD66BC34D283D0F865DC16D4DB62635D1D9B3 $A9044B9AE03BCA32DEECB70A973E34C02F72CFC8 $AA4644F0EC589EEA2F501BB867E32E599F8169DA $AA69CADA1FEA6378EDD776011

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49907	45.66.35.11	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:46.268126011 CET	172	OUT	GET /tor/server/fp/85fb50efa9c97896a6943cf3b54123c54444cb54 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:47.318397045 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:47 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:47 GMT Data Raw: 72 6f 75 74 65 72 20 4d 6f 6f 45 78 69 74 35 20 34 35 2e 31 34 31 2e 32 31 35 2e 31 31 36 20 39 30 30 35 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 64 2f 41 65 4e 6f 37 68 7a 66 75 78 44 4e 71 4c 2f 58 77 79 76 37 67 5a 54 46 64 4d 76 4f 47 49 4b 62 44 4e 30 5a 47 57 58 66 73 59 34 55 41 51 41 67 42 41 43 4e 39 42 63 45 0a 32 50 6d 61 78 4c 50 51 4b 51 63 49 4c 52 2f 39 67 42 52 62 78 70 37 52 37 65 4a 4f 61 75 79 70 31 56 37 65 30 70 39 50 49 42 6e 74 45 31 72 6b 6b 52 44 4a 4e 2b 77 49 34 51 76 49 42 59 45 4c 0a 5a 73 48 2f 54 47 38 6f 73 72 59 69 66 6f 51 4b 2b 30 57 32 36 70 44 34 53 76 6a 4a 6f 76 70 32 4e 63 71 75 70 70 5a 58 48 53 65 43 2b 46 73 74 31 37 67 61 68 4d 69 35 39 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6a 66 51 58 42 4e 6a 35 6d 73 53 7a 30 43 6b [TRUNCATED] Data Ascii: router MooExit5 45.141.215.116 9005 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1d/AeNo7hzfuxDNqL/Xwyv7gZTFdMvOGIKbDN0ZGWXfsY4UAQAgBACN9BcE2PmaxLPQKQcILR/9gBRbxp7R7eJOauyp1V7e0p9PIBntE1rkkRDJN+wI4QvIBYELZsH/TG8osrYifoQK+0W26pD4SvjJovp2NcquppZXHSeC+Fst17gahMi59AE=-----END ED25519 CERT-----master-key-ed25519 jfQXBNj5msSz0CkHCC0f/YAUW8ae0e3iTmrsqdVe3tIor-address [2a12:a800:2:1:45:141:215:116]:9005platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 16:44:42fingerprint 85FB 50EF A9C9 7896 A694 3CF3 B541 23C5 4444 CB54uptime 1951782bandwidth 1073741824 1073741824 11411738extra-info-digest 545F243F7C16E2303367304427C91701C677D690 ad6ZHUWzxCRPatgGLrK2vi4V0HoMoeIGUeBT3te6aS8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANjFV2aaY6WzxPBpRZ+RynNlb7f00ZqJHhW0xPwl94tOGlW+LSq53SGwbzXj0NHQFOJBCOF55lXE1WAFlliTtxTdXfHlmfBtbdTyFCdIa6hQRQIO4F4OXQfL [TRUNCATED]
Nov 3, 2024 09:42:47.318435907 CET	1236	IN	Data Raw: 73 39 4c 75 4f 42 48 41 55 49 79 68 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 Data Ascii: s9LuOBHAUIyhAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK3YGyMnFUP62NZtBm4nG2bZUBjtGM1vXZSGe5sWYy5hwuDa2l6zsw9cx2JR1uGb14hrz9kJzbF52wyKv/MAl0GmreA759phuk4v+No4fhYW0EQhspRf89p9v/x/hl7WwsRW6V+nnZ3W
Nov 3, 2024 09:42:47.318448067 CET	747	IN	Data Raw: 34 4d 72 51 58 65 53 70 55 47 73 59 6b 35 48 4b 4c 70 65 75 68 54 5a 4b 4d 57 38 4d 74 58 75 58 78 68 4e 6f 62 38 72 51 51 42 72 6b 52 6a 34 37 31 5a 76 34 5a 4e 6f 43 75 36 74 65 59 77 73 4d 79 34 32 48 7a 6e 4c 70 36 67 72 43 74 31 41 55 44 43 Data Ascii: 4MrQXeSpUGsYk5HKLpeuhTZKMW8MtXuXxhNob8rQQBrkRj471Zv4ZNoCu6teYwsMy42HznLp6grCt1AUDCrWntor-onion-key Dl5XUuJ31bqRWO3/tcD9DXD0W3Ypg6NM5w+KsBaneGUreject 0.0.0.0/8:reject 169.254.0.0/16:reject 127.0.0.0/8:reject 192.168.0.0/16:reject 10.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49917	45.66.35.11	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:48.303420067 CET	172	OUT	GET /tor/server/fp/eff127fa3e850b17bf9a980afb010a172f6c6faf HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49920	45.66.35.11	80	2144	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:48.514169931 CET	172	OUT	GET /tor/server/fp/b0b0588c560a3f230418612aedf386449db81c7e HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:49.559973955 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:49 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:49 GMT Data Raw: 72 6f 75 74 65 72 20 6a 68 73 66 69 66 74 68 74 6f 72 72 65 6c 61 79 20 31 36 37 2e 32 33 35 2e 31 31 32 2e 31 33 34 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 64 78 41 5a 4a 4e 37 2b 46 36 50 30 57 73 58 72 5a 4a 53 4e 6a 73 49 6b 55 64 6e 38 2f 44 43 6d 64 7a 53 67 32 31 50 70 77 33 2b 61 72 30 41 51 41 67 42 41 41 61 58 30 66 48 0a 65 43 53 55 54 65 61 74 63 42 71 2f 4a 32 2f 7a 31 74 37 31 41 33 61 41 66 63 38 53 70 77 36 76 6f 37 53 4a 56 68 44 72 57 43 6b 51 69 63 52 57 58 30 36 43 74 6a 6f 43 50 44 65 76 74 69 37 35 0a 2b 45 56 62 39 39 4a 44 47 63 6a 67 70 31 4b 61 50 7a 62 6f 67 77 51 70 6f 55 53 32 49 30 4c 2b 6b 69 31 6e 4b 4b 44 39 6e 78 37 45 49 34 4e 45 57 2b 6a 65 53 52 56 37 47 67 77 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 47 6c 39 48 78 33 [TRUNCATED] Data Ascii: router jhsfifthtorrelay 167.235.112.134 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1dxAZJN7+F6P0WsXrZJSNjsIkUdn8/DCmdzSg21Ppw3+ar0AQAgBAAaX0fHeCSUTeatcBq/J2/z1t71A3aAfc8Spw6vo7SJVhDrWCkQicRWX06CtjoCPDevti75+EVb99JDGcjgp1KaPzbogwQpoUS2I0L+ki1nKKD9nx7EI4NEW+jeSRV7Ggw=-----END ED25519 CERT-----master-key-ed25519 Gl9Hx3gklE3mrXAavydv89be9QN2gH3PEqcOr6O0iVYor-address [2a01:4f8:2200:14dc:120::101]:9001platform Tor 0.4.8.8 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 17:12:05fingerprint B0B0 588C 560A 3F23 0418 612A EDF3 8644 9DB8 1C7Euptime 5562058bandwidth 31457280 41943040 21473135extra-info-digest 442338E33F39F807871BE428F577F94276F567B7 2SibvG1PfuJpgpRpF6xyxrUwC0/MfYaeIR1bhmRFV94onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBALQnj4HP7TZXjEmJaEverwO55R1ozvG9Ze/G/jzUvW8ZnDIF5uDVS4466ffc+NAOxCvlCokq3LvCyL3j8yMQJRyqMeiiVIk2QqDyo1s+sfey21p8kQZCr9 [TRUNCATED]
Nov 3, 2024 09:42:49.560033083 CET	764	IN	Data Raw: 52 2f 2b 48 46 53 6b 53 72 31 51 35 32 4e 64 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 Data Ascii: R/+HFSkSr1Q52NdAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL2CYu5xOVzpibiYqqyVoAe3o1y62KCSC84+nHApsnt8XYDyp4+xz8o8QzejykgYp3bU7x4NqrVeHwhSXptImudYJzJT3L20VJM4a1fUY+rK2vY0MFa3g53OOeNBlGKmXyQgG1MYE
Nov 3, 2024 09:42:49.560048103 CET	905	IN	Data Raw: 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 31 31 41 43 36 37 33 30 37 42 33 36 32 42 37 37 35 36 39 41 46 33 31 34 41 39 41 37 41 30 36 42 39 31 39 35 44 46 31 39 20 24 33 35 46 33 44 44 34 30 30 Data Ascii: -END ED25519 CERT-----family $11AC67307B362B77569AF314A9A7A06B9195DF19 $35F3DD400F1CD3A4AFD40D064D85BFAC19C9303D $3FC010E43011E91D5121F3D749DC56F8AB03BB8B $4DB57C6E34E73E45FDC03223E69F38379D3F9995 $55E1500DD1CC6A0C0419D4F3414F4FADE29FE50E $72

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49924	45.66.35.11	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:49.354000092 CET	172	OUT	GET /tor/server/fp/eff127fa3e850b17bf9a980afb010a172f6c6faf HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:50.408493042 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:50 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:50 GMT Data Raw: 72 6f 75 74 65 72 20 6d 61 72 63 75 73 65 37 20 31 37 38 2e 32 30 2e 35 35 2e 31 36 20 31 39 30 30 37 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 59 7a 41 54 50 31 78 4b 53 6e 70 51 32 58 67 36 47 76 35 6d 64 51 41 33 68 36 4c 54 58 6d 44 61 75 6f 50 68 4e 49 5a 73 36 4f 54 57 4e 67 41 51 41 67 42 41 44 46 4c 44 37 65 0a 6f 6b 54 47 51 69 39 77 76 53 38 6c 77 74 79 38 5a 34 37 53 78 56 34 43 6b 74 73 52 62 4f 54 41 74 52 76 51 39 63 77 42 65 75 59 4f 6e 4c 70 6f 72 63 63 51 37 78 4a 74 75 34 4c 31 2b 63 4b 36 0a 76 67 62 46 70 77 77 39 49 74 6f 4a 48 72 6a 6d 45 32 38 39 38 39 62 42 4c 54 75 75 42 36 7a 59 44 79 75 5a 44 48 44 51 61 49 73 6d 63 31 70 68 55 59 33 47 36 41 61 4b 48 51 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 78 53 77 2b 33 71 4a 45 78 6b 49 76 63 4c 30 76 [TRUNCATED] Data Ascii: router marcuse7 178.20.55.16 19007 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1YzATP1xKSnpQ2Xg6Gv5mdQA3h6LTXmDauoPhNIZs6OTWNgAQAgBADFLD7eokTGQi9wvS8lwty8Z47SxV4CktsRbOTAtRvQ9cwBeuYOnLporccQ7xJtu4L1+cK6vgbFpww9ItoJHrjmE28989bBLTuuB6zYDyuZDHDQaIsmc1phUY3G6AaKHQg=-----END ED25519 CERT-----master-key-ed25519 xSw+3qJExkIvcL0vJcLcvGeO0sVeApLbEWzkwLUb0PUor-address [2a00:1b88:4::2]:19007platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 23:37:58fingerprint EFF1 27FA 3E85 0B17 BF9A 980A FB01 0A17 2F6C 6FAFuptime 64807bandwidth 1073741824 1073741824 19434771extra-info-digest 7F97F0AB1EB38A71C74FAE421D1E629F9B11081E ivmo0U6S3DvXXtSGU5df58vt3DZJ9oIaLkFn9yNQGgkonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKdxj+LjD9v/mx8I/djBduDUGoGmXpx9B5Ayvd8ZBAt+2TwEiNhjOcVxhXEr8lzN9k7h4eLt3fj82ppASZkKstifcBvuTjPmMqyGILMhyvI9VRsEGSIqMsDzrFBML4l0gXjaj5uZ [TRUNCATED]
Nov 3, 2024 09:42:50.408659935 CET	1236	IN	Data Raw: 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 Data Ascii: AAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMx7SrWI7MktaYXaVu6AGqBpxbSABoQUkoLZddR8AcsfJHUO0WD5jvIYQpQY3dwrCRi3dsGMcC5ZD/IsA3jlMIU1v5QicPw/EHEUPlrVz50UbEngJBBQeSIuD3MJCVwRPWCIFrdLsxWadkEYeAfnhiMGaegD
Nov 3, 2024 09:42:50.408673048 CET	1236	IN	Data Raw: 20 24 34 34 44 31 39 32 39 36 39 30 43 46 31 44 45 46 39 35 43 35 44 31 46 34 46 36 36 32 38 31 43 46 31 38 33 31 31 36 31 38 20 24 34 37 38 36 34 31 38 45 41 34 33 43 46 44 36 41 41 36 43 37 45 31 34 42 33 45 37 34 36 33 37 43 36 39 38 39 46 36 Data Ascii: $44D1929690CF1DEF95C5D1F4F66281CF18311618 $4786418EA43CFD6AA6C7E14B3E74637C6989F658 $47EC4211A4A66768224BC18912AF8FB6E880003C $4A39E7D2C121F664CFD9B5DF80CE9E70BB8B3C16 $4B8F0F8BB18F1D9ADC1FE7E54B3D3D605C1919A7 $4F0C498701A41F4D9CA677EA763FD8C
Nov 3, 2024 09:42:50.408684969 CET	1236	IN	Data Raw: 61 64 6d 69 6e 73 79 73 40 6e 6f 73 2d 6f 69 67 6e 6f 6e 73 2e 6e 65 74 3e 20 2d 20 31 37 57 4c 77 74 57 36 33 46 72 48 65 4d 41 45 56 6b 41 4c 6e 77 68 66 6d 69 7a 42 78 47 58 44 57 31 20 65 6d 61 69 6c 3a 61 64 6d 69 6e 73 79 73 5b 5d 6e 6f 73 Data Ascii: adminsys@nos-oignons.net> - 17WLwtW63FrHeMAEVkALnwhfmizBxGXDW1 email:adminsys[]nos-oignons.net url:https://nos-oignons.net proof:uri-rsa ciissversion:2ntor-onion-key oEqNSSisEdeTfEfB0ucNe5NdeZv44Wi5qJRW+0Bzd0Mreject 0.0.0.0/8:*reject 169.25
Nov 3, 2024 09:42:50.408696890 CET	940	IN	Data Raw: 3a 38 33 33 32 2d 38 33 33 33 0a 61 63 63 65 70 74 20 2a 3a 38 34 34 33 0a 61 63 63 65 70 74 20 2a 3a 38 38 38 38 0a 61 63 63 65 70 74 20 2a 3a 39 34 31 38 0a 61 63 63 65 70 74 20 2a 3a 39 39 39 39 0a 61 63 63 65 70 74 20 2a 3a 31 30 30 30 30 0a Data Ascii: :8332-8333accept :8443accept :8888accept :9418accept :9999accept :10000accept :11371accept :19294accept :19638accept :50002accept :64738reject :ipv6-policy accept 20-23,43,53,79-81,88,110,143,194,220,389,443,464-465,531

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49942	216.218.219.41	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:42:52.962477922 CET	175	OUT	GET /tor/server/fp/fe277f2b34c90904c1a2d704ed2a46fc0802400c HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:42:54.762984991 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:42:54 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:42:54 GMT Data Raw: 72 6f 75 74 65 72 20 48 61 70 70 79 54 6f 72 20 32 30 39 2e 31 34 31 2e 36 30 2e 32 31 39 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 67 4a 41 59 72 6d 75 79 7a 6f 41 30 2f 6c 6d 6d 64 48 51 32 66 6c 63 37 41 4b 41 49 37 6c 53 51 74 32 56 33 72 63 61 34 56 74 64 75 48 71 41 51 41 67 42 41 43 55 42 4b 54 56 0a 52 65 6d 58 2f 70 4b 64 78 32 47 6e 45 66 34 62 6d 6d 52 4f 6f 48 31 4e 35 4a 4b 71 4e 65 4e 33 57 2b 6e 43 49 65 50 4e 37 47 72 38 2f 65 32 70 6d 71 2f 53 35 78 35 55 54 71 41 51 78 37 2f 75 0a 57 74 58 76 69 39 4d 33 47 79 36 48 37 67 32 4b 5a 55 51 6f 66 33 59 77 63 63 33 2b 61 37 6b 62 37 4e 79 4e 59 31 4c 33 6e 53 4b 79 30 37 37 32 75 68 42 35 37 54 4b 48 66 51 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 6c 41 53 6b 31 55 58 70 6c 2f 36 53 6e 63 64 [TRUNCATED] Data Ascii: router HappyTor 209.141.60.219 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1gJAYrmuyzoA0/lmmdHQ2flc7AKAI7lSQt2V3rca4VtduHqAQAgBACUBKTVRemX/pKdx2GnEf4bmmROoH1N5JKqNeN3W+nCIePN7Gr8/e2pmq/S5x5UTqAQx7/uWtXvi9M3Gy6H7g2KZUQof3Ywcc3+a7kb7NyNY1L3nSKy0772uhB57TKHfQE=-----END ED25519 CERT-----master-key-ed25519 lASk1UXpl/6SncdhpxH+G5pkTqB9TeSSqjXjd1vpwiEor-address [2605:6400:20:a28:b37e:88e9:caa1:7b9c]:9001platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 20:40:34fingerprint FE27 7F2B 34C9 0904 C1A2 D704 ED2A 46FC 0802 400Cuptime 4410101bandwidth 1073741824 1073741824 8503151extra-info-digest EAB656F26B43CE56B02390FF4076A548AB864702 PIbpAgNRXZhiaxy53c7ySSDBfpMZZDJS/MbIRb7vT3Eonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL06TyhNChZstL/n8rmtdpMeHGfOTp8KHuzztwgue2YJx5hTP3+jFtVqurlj5znDZKYKu8VlXG/6jXRW4ic+6iu8FT7G75i6UawcjeoLTlFXI/xpSV [TRUNCATED]
Nov 3, 2024 09:42:54.763000965 CET	1236	IN	Data Raw: 79 4a 68 75 42 2f 54 31 50 70 2b 33 50 6f 66 37 6c 33 62 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 Data Ascii: yJhuB/T1Pp+3Pof7l3bAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMh1VmDJF2Bo2TVKuQAd0TZZdy7tI9gvgtLvLx8Zhmnf1rqGiYlgJsG/pU2iguKNcZk4ne9ZqKBuYs8ZIR7XN+v/YBZx5suXKBvUVgldMcTwrSr65TwHzwHQ7NGx29Y+nFpHm
Nov 3, 2024 09:42:54.763012886 CET	1236	IN	Data Raw: 65 70 74 20 2a 3a 34 36 34 0a 61 63 63 65 70 74 20 2a 3a 35 33 31 0a 61 63 63 65 70 74 20 2a 3a 35 34 33 2d 35 34 34 0a 61 63 63 65 70 74 20 2a 3a 35 35 34 0a 61 63 63 65 70 74 20 2a 3a 35 36 33 0a 61 63 63 65 70 74 20 2a 3a 36 33 36 0a 61 63 63 Data Ascii: ept :464accept :531accept :543-544accept :554accept :563accept :636accept :706accept :749accept :853accept :873accept :902-904accept :981accept :989-990accept :991accept :992accept :993accept :994accept :995
Nov 3, 2024 09:42:54.763106108 CET	395	IN	Data Raw: 31 2c 31 39 32 39 34 2c 31 39 36 33 38 2c 35 30 30 30 32 2c 36 34 37 33 38 0a 74 75 6e 6e 65 6c 6c 65 64 2d 64 69 72 2d 73 65 72 76 65 72 0a 72 6f 75 74 65 72 2d 73 69 67 2d 65 64 32 35 35 31 39 20 55 4f 4d 7a 52 64 48 4b 63 47 6d 30 78 36 63 73 Data Ascii: 1,19294,19638,50002,64738tunnelled-dir-serverrouter-sig-ed25519 UOMzRdHKcGm0x6csWkX2Q8mFTEStLmBnsQ6gY6+vRT8TfajsUOjEDT3PH8ix/LjAxrjNVltomzYSiWxN8QgbAArouter-signature-----BEGIN SIGNATURE-----D+SsVFqvrzxXE7rCb+SRIyL33/ihp1BEn8LCkxu5wDJvT0b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49990	193.23.244.244	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:03.758982897 CET	175	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49996	216.218.219.41	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:04.849297047 CET	175	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49999	216.218.219.41	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:05.617691994 CET	175	OUT	GET /tor/server/fp/fe296180018833af03a8eacd5894a614623d3f76 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	50010	193.23.244.244	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:07.400887012 CET	175	OUT	GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	50014	216.218.219.41	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:08.478589058 CET	175	OUT	GET /tor/server/fp/fe384392c982659ab28b51fb98c2179b5e8ce371 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:09.241256952 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:09 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:09 GMT Data Raw: 72 6f 75 74 65 72 20 46 52 45 45 57 41 59 20 33 31 2e 32 32 30 2e 37 34 2e 31 33 33 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 69 44 41 52 62 44 69 59 45 79 6d 62 75 34 4a 61 36 39 54 61 56 6f 62 70 43 45 43 42 59 65 76 33 4b 7a 32 4f 6b 49 52 48 4f 61 61 62 36 79 41 51 41 67 42 41 41 66 6f 77 46 48 0a 78 74 36 36 79 58 50 76 65 50 4c 65 34 43 4f 4e 67 6f 54 46 51 54 79 51 74 69 58 72 43 35 49 6a 4a 45 4c 72 6b 2f 54 38 4d 66 64 59 4d 6f 2f 4e 49 35 64 44 4a 32 53 59 33 65 6a 4f 79 59 66 48 0a 77 6b 76 62 66 6b 51 56 33 57 6c 52 32 41 43 6a 6e 2f 44 31 2f 41 6f 55 4f 78 43 51 7a 2f 59 35 49 55 53 6d 64 68 6b 73 57 5a 46 65 70 6d 35 43 54 4d 79 58 42 6e 65 54 36 67 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 48 36 4d 42 52 38 62 65 75 73 6c 7a 37 33 6a 79 33 [TRUNCATED] Data Ascii: router FREEWAY 31.220.74.133 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1iDARbDiYEymbu4Ja69TaVobpCECBYev3Kz2OkIRHOaab6yAQAgBAAfowFHxt66yXPvePLe4CONgoTFQTyQtiXrC5IjJELrk/T8MfdYMo/NI5dDJ2SY3ejOyYfHwkvbfkQV3WlR2ACjn/D1/AoUOxCQz/Y5IUSmdhksWZFepm5CTMyXBneT6gE=-----END ED25519 CERT-----master-key-ed25519 H6MBR8beuslz73jy3uAjjYKExUE8kLYl6wuSIyRC65Mplatform Tor 0.4.8.10 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 18:20:08fingerprint FE38 4392 C982 659A B28B 51FB 98C2 179B 5E8C E371uptime 7304799bandwidth 1073741824 1073741824 50485060extra-info-digest 18D4C29E489FE6A6D2F93F448494B997EA02C502 o1tS9GSW9Tvc75rT3ZmJqcG3SHx5041TIO3GqLzVV+sonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMowgJErPX2o8u8CntxxgRAlO3uiolfO03fGGNSbU/OmD+Q6TlOBLCTQVy51rIhg551TmcfkvDq9zHlqOj35PTwmL99PKzwd1KPPBUgUMAW1l0vOPAwuVS521+9X791HwAgTLp5Tc27r50VKQTr0yBU+WaZYO4CngxeRAKUT7 [TRUNCATED]
Nov 3, 2024 09:43:09.241271019 CET	1236	IN	Data Raw: 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4e 59 6c 54 79 63 32 34 52 4c 6b 77 34 35 4c 53 6f 46 6b 49 56 4d 53 36 48 41 32 47 46 Data Ascii: signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANYlTyc24RLkw45LSoFkIVMS6HA2GF+8yTOfp1pOY8STaZddPeDuHi3e9y0kGEVJFWNW4VmRzNASNZv8smiO8ugzM2qTw+XTRcjI/zWrlkOa3+86CWD0HY2OSqUEnCaT8SM8IlkVPEZGtyMObeDjdUUVYdvdIztOmSMGipdVShFHAgMBAAE=-----END
Nov 3, 2024 09:43:09.241281986 CET	113	IN	Data Raw: 4c 69 7a 61 50 6c 34 35 34 34 61 51 56 6c 70 2b 30 49 38 6b 6b 55 67 4d 6d 74 48 5a 37 45 61 72 53 63 67 78 4c 4b 33 44 58 67 4a 0a 4a 6b 43 6d 56 49 36 73 70 6b 50 33 6e 66 35 51 78 70 71 2b 74 4a 70 52 78 4e 75 59 62 56 6d 61 59 64 4f 44 6c 47 Data Ascii: LizaPl4544aQVlp+0I8kkUgMmtHZ7EarScgxLK3DXgJJkCmVI6spkP3nf5Qxpq+tJpRxNuYbVmaYdODlGDxYTg=-----END SIGNATURE-----

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	50035	45.66.35.11	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:12.792457104 CET	172	OUT	GET /tor/server/fp/5a7de9083be6228a433955a4649c9865c909676a HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:13.840786934 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:13 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:13 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 34 35 2e 31 34 31 2e 32 31 35 2e 35 36 20 38 34 33 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 61 59 56 48 44 30 51 71 75 63 6c 6d 58 48 49 76 62 77 6c 64 43 45 49 59 4f 6f 36 59 6c 5a 37 50 7a 74 73 42 35 72 57 6d 30 43 65 41 51 41 67 42 41 42 59 4b 72 38 6d 0a 69 49 64 59 75 76 36 65 58 71 66 79 62 73 79 39 36 68 64 6b 57 69 51 63 37 31 51 68 55 6a 34 61 54 54 35 35 79 6b 78 45 67 66 45 36 38 6e 39 50 64 47 39 58 53 62 6c 35 2b 77 55 2f 49 50 38 43 0a 79 46 63 55 4b 56 46 37 49 6b 7a 41 42 73 6a 32 65 32 52 45 34 37 30 6a 52 6b 4c 36 77 74 63 6b 6b 71 73 58 78 4b 6a 75 39 59 70 44 76 33 63 4b 45 2f 5a 31 54 64 32 48 65 67 67 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 57 43 71 2f 4a 6f 69 48 57 4c 72 2b [TRUNCATED] Data Ascii: router Quetzalcoatl 45.141.215.56 8430 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAaYVHD0QquclmXHIvbwldCEIYOo6YlZ7PztsB5rWm0CeAQAgBABYKr8miIdYuv6eXqfybsy96hdkWiQc71QhUj4aTT55ykxEgfE68n9PdG9XSbl5+wU/IP8CyFcUKVF7IkzABsj2e2RE470jRkL6wtckkqsXxKju9YpDv3cKE/Z1Td2Hegg=-----END ED25519 CERT-----master-key-ed25519 WCq/JoiHWLr+nl6n8m7MveoXZFokHO9UIVI+Gk0+ecoor-address [2a12:a800:2:1:45:141:215:56]:8430platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:23:48fingerprint 5A7D E908 3BE6 228A 4339 55A4 649C 9865 C909 676Auptime 324066bandwidth 1073741824 1073741824 7290636extra-info-digest 865236792538F6B57AAE337CF4E02E067C9751FF sRTzbsfqZuyJF2Gvyllzvrxo4gE3M8qWYmDho/a1rO8onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAM7rdccbDS85i2LeGoAluJvxILf260QWFZvcDJhVdB3wS2JewPwi7rfjDRnTj5XXJc2Gm6PYCxjkByB/glW/IvbrfkQ+Y608Blbq04EEZvXwS1i/ACBgA1Ya [TRUNCATED]
Nov 3, 2024 09:43:13.840929985 CET	1236	IN	Data Raw: 48 6d 68 78 5a 5a 4d 75 71 76 51 46 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 Data Ascii: HmhxZZMuqvQFAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAL14+tqxvYaTEw9V1DasHGlbNVgSjQUSkOUnZ9sFctWhskzK4lwpminq7l40C3wc0UjDRSPavBd5PLfBg7uu3yEzj3mBX5usFbk5VlshkML/4ZGEleS+6SyFQWMFqyIxTnPtEIg6rfE5
Nov 3, 2024 09:43:13.840950012 CET	1236	IN	Data Raw: 31 38 30 33 33 41 32 32 38 32 37 45 33 43 34 36 20 24 30 41 37 36 43 30 41 30 41 37 32 31 44 44 42 43 33 32 34 42 37 30 35 41 44 42 46 43 39 35 46 44 38 30 36 41 45 38 35 35 20 24 30 41 46 39 38 32 43 43 37 31 41 30 31 44 39 35 45 38 39 35 39 44 Data Ascii: 18033A22827E3C46 $0A76C0A0A721DDBC324B705ADBFC95FD806AE855 $0AF982CC71A01D95E8959D763D0EC0E5A6C61244 $0B5BC76B3BE7553B229FD3E73F26AED41C31DD19 $0B8EF5F5016926F4245350FB37914E30BF36C528 $0CD666F9C9A40A8CFB1E6B9465597A51D3A1CBF8 $0CF48696F004482
Nov 3, 2024 09:43:13.840962887 CET	1236	IN	Data Raw: 32 37 44 44 42 39 30 34 44 36 34 39 45 37 41 35 32 36 30 38 38 42 37 45 31 35 42 42 34 32 43 35 33 42 42 35 33 46 36 30 20 24 32 37 46 41 45 39 39 43 30 44 42 41 38 43 44 39 44 42 46 45 34 32 44 32 44 32 34 36 34 42 34 43 36 38 45 45 42 30 30 44 Data Ascii: 27DDB904D649E7A526088B7E15BB42C53BB53F60 $27FAE99C0DBA8CD9DBFE42D2D2464B4C68EEB00D $28E427C3E7FEB76C58901DCF1565EA44589E437C $2979E1F476F04311E5088B5C12554E8B318F8A7B $2A7FE76900BB03DEAD983EB149BC8FB2F48B137F $2B7F152EAFEF8B99ABF42FBE2ED4682F5
Nov 3, 2024 09:43:13.840974092 CET	1236	IN	Data Raw: 32 41 31 41 38 32 37 36 39 34 46 32 30 30 33 41 44 30 39 34 42 30 20 24 33 39 32 42 45 46 44 43 42 30 32 36 41 35 36 38 45 30 37 37 37 38 36 45 37 39 46 44 45 35 38 39 41 39 43 30 45 34 35 31 20 24 33 39 33 43 33 44 42 32 45 46 38 31 43 34 36 39 Data Ascii: 2A1A827694F2003AD094B0 $392BEFDCB026A568E077786E79FDE589A9C0E451 $393C3DB2EF81C469CC80A982CC31570423829099 $39CE03A66016B0D69BC6C2A1F362C628436FEF7B $3A282FE698A04D83511D526A525F2C45896454AC $3A72AE52214E2F60182D311CF68B2AC7E1E849B0 $3AD0E099E
Nov 3, 2024 09:43:13.840990067 CET	1236	IN	Data Raw: 45 43 41 34 20 24 34 43 45 34 32 32 34 34 36 44 34 33 42 30 41 32 31 46 30 46 39 43 41 31 34 36 44 39 30 37 35 35 38 33 34 30 32 31 30 32 20 24 34 43 45 36 30 38 42 31 31 44 44 41 33 36 36 35 44 41 35 31 41 39 34 35 33 32 46 45 45 38 32 42 39 43 Data Ascii: ECA4 $4CE422446D43B0A21F0F9CA146D9075583402102 $4CE608B11DDA3665DA51A94532FEE82B9C2EC359 $4EFF3D0C9DE539CF1E27BFC5B3E23BC7CB2D41A9 $4FE78C2FF1468CCF2193E33E2E79066862D52AEC $506B473E673E38EA9FECB7A5A73DD1E1FC37B555 $51691C7926B134AB582F3489D23
Nov 3, 2024 09:43:13.841001034 CET	1236	IN	Data Raw: 35 36 31 43 39 32 46 45 41 41 30 34 32 37 46 33 41 46 30 37 32 39 36 43 45 39 45 30 20 24 35 46 34 36 44 44 41 41 46 43 43 42 43 39 45 46 37 35 30 33 33 36 35 36 30 38 45 46 31 43 36 41 34 39 44 43 35 32 35 30 20 24 35 46 38 41 43 44 39 44 36 36 Data Ascii: 561C92FEAA0427F3AF07296CE9E0 $5F46DDAAFCCBC9EF7503365608EF1C6A49DC5250 $5F8ACD9D6624450926AB0BEDB7DDE9AE43B0D04C $601021EEAF3207505D67DEB77F40A9914A9B8856 $603CE0404FEB3BD363225C56FE429913E540E5FC $6052B7DC00F4E86B760350151665510BB9AE4C03 $60E
Nov 3, 2024 09:43:13.841012955 CET	1236	IN	Data Raw: 30 39 37 33 45 45 31 30 44 38 20 24 37 32 30 43 35 35 30 44 35 38 46 41 33 43 39 46 43 43 35 34 39 30 33 36 31 34 34 34 38 32 37 32 31 36 36 38 37 37 41 41 20 24 37 32 38 41 45 44 42 32 44 41 30 33 37 44 39 30 33 32 46 39 36 39 37 46 46 41 37 44 Data Ascii: 0973EE10D8 $720C550D58FA3C9FCC54903614448272166877AA $728AEDB2DA037D9032F9697FFA7D9E070783A1F6 $729EBA5E71606D7E870887473384BC803D6A4774 $72AA4CF891689332D9473A4E0140F83DB2210548 $73856192EE21DFFC37F6951861FB1959679A5558 $7413675ED252B2939556E
Nov 3, 2024 09:43:13.841025114 CET	1236	IN	Data Raw: 42 34 38 31 42 41 33 39 41 36 30 43 32 39 45 34 39 41 46 41 44 35 43 45 35 35 32 33 36 37 37 38 31 32 20 24 38 37 36 38 36 44 31 34 39 33 31 35 34 35 38 44 44 35 34 41 46 34 43 34 33 39 32 35 44 39 34 43 46 32 43 42 41 45 37 32 20 24 38 39 45 31 Data Ascii: B481BA39A60C29E49AFAD5CE5523677812 $87686D149315458DD54AF4C43925D94CF2CBAE72 $89E1B5DA0C2CDFFE066520FA852448EE0C4F3562 $8A02B09998F74FFE287CB928937E070CA57F1854 $8A522F30A3CEA7C692A0418C936232BA2E54F8B3 $8AB766FB1BE54669559B82165964B8D79DA8011
Nov 3, 2024 09:43:13.841037035 CET	1236	IN	Data Raw: 31 33 32 31 31 45 35 44 35 37 36 41 34 34 44 39 20 24 39 37 37 45 37 42 45 41 42 33 38 32 42 44 39 45 31 32 43 36 45 30 42 38 42 41 31 35 45 33 38 36 42 31 35 42 43 37 46 35 20 24 39 37 44 38 30 39 44 46 34 30 41 35 42 34 31 30 32 46 32 43 34 39 Data Ascii: 13211E5D576A44D9 $977E7BEAB382BD9E12C6E0B8BA15E386B15BC7F5 $97D809DF40A5B4102F2C4956A7DB7E709B611832 $982F261EC5D2D7DB89D7D0320009E02E752DFE69 $98AE10E67739CCC9FAD8B223236BBB080C3B0852 $99B6E09CF6084DB3A0D77BC0CFB1C6FC3B65A341 $9A11E4B46DC53E1
Nov 3, 2024 09:43:13.845925093 CET	1224	IN	Data Raw: 42 30 46 35 41 36 46 39 42 44 45 32 31 41 45 44 42 39 32 41 45 45 41 35 42 43 39 44 30 32 31 43 42 39 36 42 37 44 43 38 20 24 42 31 44 39 30 33 38 42 39 44 34 45 35 36 44 31 41 43 35 43 46 45 32 44 33 42 35 46 45 34 41 32 45 41 30 30 36 42 43 36 Data Ascii: B0F5A6F9BDE21AEDB92AEEA5BC9D021CB96B7DC8 $B1D9038B9D4E56D1AC5CFE2D3B5FE4A2EA006BC6 $B252D9474D8B36FC1299F6DB29C853D68900C394 $B274599CD37F4D5B2C407DC81E478135F3297EFE $B2A4EFD1B3DAD0F5FA127B5C29BBFE625628A6D9 $B4525FBE2F01B4CB2C6435DB5159C8ADE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	50042	193.23.244.244	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:14.592084885 CET	175	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	50048	45.66.35.11	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:15.660425901 CET	172	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	50053	193.23.244.244	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:16.718267918 CET	175	OUT	GET /tor/server/fp/5a8292926c5e5a246d35b843a72942fcec235bac HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	50060	216.218.219.41	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:18.136898994 CET	175	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	50061	45.66.35.11	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:18.900542021 CET	172	OUT	GET /tor/server/fp/5a914cc319f06ae7262ee441ff31d188b4831077 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:19.950902939 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:19 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:19 GMT Data Raw: 72 6f 75 74 65 72 20 70 75 6e 69 73 68 65 72 20 38 31 2e 37 39 2e 34 35 2e 31 38 34 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 65 64 41 63 64 46 70 79 2f 47 44 76 65 4b 44 47 44 50 63 5a 57 72 46 78 36 45 4b 48 50 4d 77 57 52 4c 31 71 72 76 62 30 45 49 6d 66 5a 57 41 51 41 67 42 41 44 48 74 59 37 64 0a 32 4d 6f 68 55 31 63 58 63 57 34 6d 4d 58 48 67 4e 50 30 6a 6d 41 52 44 4d 77 63 58 66 70 6b 31 52 72 5a 43 76 6b 65 4d 70 6c 45 7a 6a 76 77 57 5a 74 4d 6b 77 38 6d 33 73 50 56 4b 38 39 45 73 0a 33 49 4c 58 6d 6b 45 77 62 37 6d 44 57 43 74 79 6f 50 32 6f 72 30 4b 2b 58 6d 68 31 68 30 6f 36 41 56 71 45 2f 73 47 77 72 70 36 66 44 35 52 78 69 79 66 71 6c 31 72 43 76 67 30 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 78 37 57 4f 33 64 6a 4b 49 56 4e 58 46 33 46 75 4a [TRUNCATED] Data Ascii: router punisher 81.79.45.184 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1edAcdFpy/GDveKDGDPcZWrFx6EKHPMwWRL1qrvb0EImfZWAQAgBADHtY7d2MohU1cXcW4mMXHgNP0jmARDMwcXfpk1RrZCvkeMplEzjvwWZtMkw8m3sPVK89Es3ILXmkEwb7mDWCtyoP2or0K+Xmh1h0o6AVqE/sGwrp6fD5Rxiyfql1rCvg0=-----END ED25519 CERT-----master-key-ed25519 x7WO3djKIVNXF3FuJjFx4DT9I5gEQzMHF36ZNUa2Qr4platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 02:26:25fingerprint 5A91 4CC3 19F0 6AE7 262E E441 FF31 D188 B483 1077uptime 910148bandwidth 524288 1048576 657461extra-info-digest 51A9775FC7D0478CA7056F8D75D39E9328EF7A09 DbSGaNnZaKjPS0ZP/JH+z5n9jJojVm7WsaST9Qh4nasonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAK4hS2VfKtt/UdC+4wYsxHWajC/v3qKqwr6vvNJDsJsaPEce414LFRhgzoRaWGwYSOkG2hdRCL1NZFlaXN9srvw1tHX3dD3dFwTvtVXj1bKyz5XnHi1kWVUtjBaj4hLHPkhWIfQQPIpdMe1NjQGo1B3DaPHuKvDiysj94XuOjj0vAgMBAAE [TRUNCATED]
Nov 3, 2024 09:43:19.950920105 CET	1207	IN	Data Raw: 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a 41 6f 47 42 41 4d 4e 75 39 61 38 35 34 4f 61 50 74 4d 76 66 63 47 4e 4e 75 4a 58 54 30 68 43 52 52 49 6f 6e 66 4d 56 4a 62 73 67 4a Data Ascii: ey-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMNu9a854OaPtMvfcGNNuJXT0hCRRIonfMVJbsgJlQDDuVxUkXiVj1zBhPZ12TlwtVWu7oL4NXPlKt2U+Ea4ow9K/lmzwanr7s+aE5jHNhcNthOllm6WZoqe0NXndlOW1LvR895DK8O+pK1rNo/44ypNsGZqRo4nCYyPWsFoLgJfAgMBAAE=-----END RSA PUBLI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	50063	216.218.219.41	80	2144	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:22.006494045 CET	175	OUT	GET /tor/server/fp/238abd6efe42b1969da03d9725edad231e33ea6c HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	50064	193.23.244.244	80	2144	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:22.786525011 CET	175	OUT	GET /tor/server/fp/238abd6efe42b1969da03d9725edad231e33ea6c HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	50065	216.218.219.41	80	2144	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:23.859899998 CET	175	OUT	GET /tor/server/fp/238abd6efe42b1969da03d9725edad231e33ea6c HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	50068	193.23.244.244	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:35.291920900 CET	175	OUT	GET /tor/server/fp/b7db49b44dd933c964b47c399a50f5d50fdf918c HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	50069	193.23.244.244	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:36.344949007 CET	175	OUT	GET /tor/server/fp/b7db49b44dd933c964b47c399a50f5d50fdf918c HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	50070	45.66.35.11	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:37.411000013 CET	172	OUT	GET /tor/server/fp/b7db49b44dd933c964b47c399a50f5d50fdf918c HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	50073	216.218.219.41	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:53.644871950 CET	175	OUT	GET /tor/server/fp/926955277c7bdb6cd1e1561a91847cbcd5b079e5 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	50074	216.218.219.41	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:54.429147005 CET	175	OUT	GET /tor/server/fp/926955277c7bdb6cd1e1561a91847cbcd5b079e5 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:55.198837996 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:55 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:55 GMT Data Raw: 72 6f 75 74 65 72 20 30 78 33 64 30 31 20 31 34 35 2e 32 33 39 2e 32 30 36 2e 33 31 20 39 30 30 31 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 65 38 41 55 32 57 55 49 79 47 73 53 72 71 6e 55 2f 71 69 31 4e 56 52 61 46 76 61 52 76 6a 61 75 42 68 6a 31 35 46 53 65 57 4d 64 35 69 6e 41 51 41 67 42 41 44 55 67 4d 6e 53 0a 50 37 74 61 37 6b 48 33 63 47 49 49 4f 31 53 5a 63 77 57 38 33 4b 52 67 4f 34 5a 71 66 38 36 6f 53 69 30 62 58 6c 6c 47 75 51 4f 72 63 2b 53 31 69 44 48 72 37 72 36 52 61 4a 39 44 33 4d 68 4c 0a 32 78 49 4e 71 66 6a 4c 37 4c 32 75 39 35 61 57 67 73 45 75 71 36 39 4f 33 6f 42 69 46 61 58 34 77 52 4a 4a 37 44 45 6a 32 76 70 61 6e 57 52 45 42 4d 72 49 69 6f 48 72 65 41 63 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 31 49 44 4a 30 6a 2b 37 57 75 35 42 39 33 42 69 43 [TRUNCATED] Data Ascii: router 0x3d01 145.239.206.31 9001 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1e8AU2WUIyGsSrqnU/qi1NVRaFvaRvjauBhj15FSeWMd5inAQAgBADUgMnSP7ta7kH3cGIIO1SZcwW83KRgO4Zqf86oSi0bXllGuQOrc+S1iDHr7r6RaJ9D3MhL2xINqfjL7L2u95aWgsEuq69O3oBiFaX4wRJJ7DEj2vpanWREBMrIioHreAc=-----END ED25519 CERT-----master-key-ed25519 1IDJ0j+7Wu5B93BiCDtUmXMFvNykYDuGan/OqEotG14or-address [2001:41d0:800:b1f::]:9001platform Tor 0.4.8.12 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 08:18:18fingerprint 9269 5527 7C7B DB6C D1E1 561A 9184 7CBC D5B0 79E5uptime 3452546bandwidth 15360000 20480000 15122395extra-info-digest B7ED1B194F8FFD4712BE4D0A8ED76309FF8840EF atbuOf8UBVc0LXTYPCVXySSKXaAjYy0MEs6rI8vj270onion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAMqkGaQqsyDa5plcXl9onh5a/s7R0rz0Cz8tbRxG/LH7H7kbJvzUcw0Sn4GxszZjarWCFWTwendzLk1UhEfCXbJcvdI6XJMPtFGZ6mcqrJwV0SoNvlJbYNlj36Je31JoaHUsZlE [TRUNCATED]
Nov 3, 2024 09:43:55.198856115 CET	764	IN	Data Raw: 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 4d 49 47 4a Data Ascii: BAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAJdl24wgIA4LVOPs6FWIci3F76xGrcuuQQlo6Qg0UlYR6mWUogGsRMCpUViiErcP0XBaEDdCO2ZP0i6YcF/0S2uNQUILu/xtA2BSVyKnQA8WCAkcpb8tTFSnPxFyVV5KYb8XTXCsxUl08QxDxlDd+pNnW1q
Nov 3, 2024 09:43:55.198869944 CET	617	IN	Data Raw: 2d 2d 2d 2d 0a 66 61 6d 69 6c 79 20 24 39 31 32 41 37 43 35 37 45 30 35 36 30 36 41 46 36 30 32 45 43 36 33 44 31 44 30 36 42 42 44 35 43 37 41 41 45 35 31 36 20 24 39 32 36 39 35 35 32 37 37 43 37 42 44 42 36 43 44 31 45 31 35 36 31 41 39 31 38 Data Ascii: ----family $912A7C57E05606AF602EC63D1D06BBD5C7AAE516 $926955277C7BDB6CD1E1561A91847CBCD5B079E5hidden-service-dircontact tor at 0x3d dot lu - 1x3dG3utS7FDrTtJutnR3zuCo4Z8fUUALntor-onion-key xVS3JX6surz2LsKQc2LWDFnXLFOStrWBOpfcpryO4g8reject

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	50075	193.23.244.244	80	6812	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:55.505657911 CET	175	OUT	GET /tor/server/fp/140e4fc6202fe17f46337058fc9848fa9055482b HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:56.542941093 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:56 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:56 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 34 35 2e 31 33 38 2e 31 36 2e 34 32 20 31 34 33 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 65 43 32 6c 44 68 70 2b 77 34 78 58 4a 50 50 77 72 34 30 58 71 51 34 4b 50 45 56 30 73 56 38 64 39 61 63 7a 53 50 75 64 72 7a 45 41 51 41 67 42 41 43 31 71 41 57 34 0a 73 58 61 33 51 76 66 6c 61 6a 67 70 66 49 55 32 4f 6c 57 55 45 69 33 33 4d 33 35 4c 72 68 2f 62 72 6e 30 33 6c 34 53 65 2b 2b 4d 62 78 33 39 58 4d 62 5a 69 2b 70 67 33 4d 62 33 41 6e 2f 65 77 0a 64 33 74 74 2b 73 56 51 4e 37 37 70 66 38 49 34 76 35 69 42 44 57 35 75 78 31 70 5a 48 2b 51 2f 72 4d 6c 75 6f 6d 38 46 77 72 44 75 59 6f 36 6a 4a 58 46 4c 73 30 68 49 46 67 6b 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 74 61 67 46 75 4c 46 32 74 30 4c 33 35 57 [TRUNCATED] Data Ascii: router Quetzalcoatl 45.138.16.42 143 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAeC2lDhp+w4xXJPPwr40XqQ4KPEV0sV8d9aczSPudrzEAQAgBAC1qAW4sXa3QvflajgpfIU2OlWUEi33M35Lrh/brn03l4Se++Mbx39XMbZi+pg3Mb3An/ewd3tt+sVQN77pf8I4v5iBDW5ux1pZH+Q/rMluom8FwrDuYo6jJXFLs0hIFgk=-----END ED25519 CERT-----master-key-ed25519 tagFuLF2t0L35Wo4KXyFNjpVlBIt9zN+S64f2659N5cor-address [2a12:a800:2:1:45:138:16:42]:143platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:19:22fingerprint 140E 4FC6 202F E17F 4633 7058 FC98 48FA 9055 482Buptime 324040bandwidth 1073741824 1073741824 7422188extra-info-digest 17037CCC7283B5E966610C8F013B9E2773287074 srdbnZPM1HVTcLd4evxTwsB6LY8K0rQj4QR+ueLVoiAonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANjcLQApAb4tdyDGiBO4kTQuHc+Idepq+pMHuwa3VGeVCzcskFbTT+4kkapkbY36QjpgdG4WhAyXZgTP9fjhhIkGwSQuwkKdTdyAHVifYZ1iGhQdOwI1IV4UOqlY [TRUNCATED]
Nov 3, 2024 09:43:56.542979956 CET	1236	IN	Data Raw: 6b 43 47 47 6a 4a 4f 37 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 Data Ascii: kCGGjJO7AgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANipPHFYxABWYJPUQFRpDa2I87uZUMk73yAW75pNJ1jDazXtBsdKUm+E7J/uxJqNdHEUzQH4ZC9dUGbjeA0qUg5J68+orrDWshNEq5eqF/8yQfjyLrEk/cbgtc6N4vNLjhvI5tpHe+acKlgu
Nov 3, 2024 09:43:56.543001890 CET	1236	IN	Data Raw: 33 41 32 32 38 32 37 45 33 43 34 36 20 24 30 41 37 36 43 30 41 30 41 37 32 31 44 44 42 43 33 32 34 42 37 30 35 41 44 42 46 43 39 35 46 44 38 30 36 41 45 38 35 35 20 24 30 41 46 39 38 32 43 43 37 31 41 30 31 44 39 35 45 38 39 35 39 44 37 36 33 44 Data Ascii: 3A22827E3C46 $0A76C0A0A721DDBC324B705ADBFC95FD806AE855 $0AF982CC71A01D95E8959D763D0EC0E5A6C61244 $0B5BC76B3BE7553B229FD3E73F26AED41C31DD19 $0B8EF5F5016926F4245350FB37914E30BF36C528 $0CD666F9C9A40A8CFB1E6B9465597A51D3A1CBF8 $0CF48696F004482C445
Nov 3, 2024 09:43:56.543024063 CET	1236	IN	Data Raw: 42 39 30 34 44 36 34 39 45 37 41 35 32 36 30 38 38 42 37 45 31 35 42 42 34 32 43 35 33 42 42 35 33 46 36 30 20 24 32 37 46 41 45 39 39 43 30 44 42 41 38 43 44 39 44 42 46 45 34 32 44 32 44 32 34 36 34 42 34 43 36 38 45 45 42 30 30 44 20 24 32 38 Data Ascii: B904D649E7A526088B7E15BB42C53BB53F60 $27FAE99C0DBA8CD9DBFE42D2D2464B4C68EEB00D $28E427C3E7FEB76C58901DCF1565EA44589E437C $2979E1F476F04311E5088B5C12554E8B318F8A7B $2A7FE76900BB03DEAD983EB149BC8FB2F48B137F $2B7F152EAFEF8B99ABF42FBE2ED4682F5A63C
Nov 3, 2024 09:43:56.543045044 CET	848	IN	Data Raw: 38 32 37 36 39 34 46 32 30 30 33 41 44 30 39 34 42 30 20 24 33 39 32 42 45 46 44 43 42 30 32 36 41 35 36 38 45 30 37 37 37 38 36 45 37 39 46 44 45 35 38 39 41 39 43 30 45 34 35 31 20 24 33 39 33 43 33 44 42 32 45 46 38 31 43 34 36 39 43 43 38 30 Data Ascii: 827694F2003AD094B0 $392BEFDCB026A568E077786E79FDE589A9C0E451 $393C3DB2EF81C469CC80A982CC31570423829099 $39CE03A66016B0D69BC6C2A1F362C628436FEF7B $3A282FE698A04D83511D526A525F2C45896454AC $3A72AE52214E2F60182D311CF68B2AC7E1E849B0 $3AD0E099EA0F6
Nov 3, 2024 09:43:56.543068886 CET	1236	IN	Data Raw: 35 46 45 42 41 43 30 35 38 42 20 24 34 34 36 45 31 36 42 30 30 44 35 31 33 31 44 41 43 39 36 34 33 41 42 31 30 31 33 36 42 33 43 44 31 39 42 31 45 39 42 39 20 24 34 34 46 41 33 36 41 38 33 39 42 41 33 35 45 42 31 35 46 33 45 43 35 43 42 35 46 42 Data Ascii: 5FEBAC058B $446E16B00D5131DAC9643AB10136B3CD19B1E9B9 $44FA36A839BA35EB15F3EC5CB5FB355238A32ABC $44FF5FFA5F90096198D514412A78C1692DBEB0EA $460D13CE3971BD2138760A892FBCF0F464C26F63 $46BFF98FBD77441B28A345DFCF0F11F70EB4A4B9 $470CA25DBABD7184461D8
Nov 3, 2024 09:43:56.543097019 CET	1236	IN	Data Raw: 43 46 45 33 32 42 36 43 41 30 46 38 46 36 37 42 36 36 32 31 42 33 45 38 42 38 39 33 31 32 43 42 37 41 20 24 35 41 32 33 34 33 33 37 45 31 39 38 31 33 32 31 36 44 44 32 31 32 33 37 42 33 36 44 34 46 32 35 32 44 37 44 37 34 33 30 20 24 35 41 34 37 Data Ascii: CFE32B6CA0F8F67B6621B3E8B89312CB7A $5A234337E19813216DD21237B36D4F252D7D7430 $5A47C6C5984F986A91DB4FB22869F71142D87362 $5A7DE9083BE6228A433955A4649C9865C909676A $5BDD0633E0AC09763E49641DCD1BA3AB3A21AA83 $5CDFBC448628E982CB34E1477745070DF78383F
Nov 3, 2024 09:43:56.543119907 CET	1236	IN	Data Raw: 35 31 43 44 41 45 42 36 31 31 42 42 43 30 34 44 20 24 36 41 36 41 33 34 42 35 35 44 46 31 42 30 41 31 44 39 37 33 37 36 37 32 31 45 37 36 36 39 41 32 36 41 43 44 34 34 37 43 20 24 36 43 39 35 45 38 31 41 38 36 42 34 38 44 42 38 33 35 41 45 31 34 Data Ascii: 51CDAEB611BBC04D $6A6A34B55DF1B0A1D97376721E7669A26ACD447C $6C95E81A86B48DB835AE1431277A301318422A18 $6E23234E4A37971B3695A6CDB5A462564E629DF9 $6E736FF4BA2845381A2FEE4DEE6CC565C5A7D781 $6F4A391685F702DC495BF8135FD17614A04000F1 $6FCA5CE61F545D1
Nov 3, 2024 09:43:56.543143034 CET	1236	IN	Data Raw: 37 43 39 46 43 37 43 39 39 44 37 46 38 33 39 38 30 45 36 32 31 42 41 38 44 34 45 30 44 34 30 46 43 45 35 33 31 30 34 46 20 24 37 46 33 35 39 30 36 43 45 38 45 33 33 43 37 46 42 36 30 45 39 45 41 31 32 31 30 31 41 42 34 43 42 45 31 33 34 30 33 43 Data Ascii: 7C9FC7C99D7F83980E621BA8D4E0D40FCE53104F $7F35906CE8E33C7FB60E9EA12101AB4CBE13403C $7FE441E277BE331F249DBF8971E5B3D39418845A $80F322ED0995F27CD26B5A9DE7B804F92E8ACA94 $81E31E75408D0804BF217AF2BC74307C2239AB3B $82CE42D04B5BA616E611E4758861C864B
Nov 3, 2024 09:43:56.543178082 CET	1236	IN	Data Raw: 38 31 37 41 41 37 33 46 44 36 44 45 38 30 34 44 46 45 43 32 43 32 20 24 39 32 41 38 43 38 32 39 32 46 30 36 45 31 38 42 31 31 36 44 44 44 35 30 46 35 31 37 30 34 30 41 31 37 44 38 30 35 31 32 20 24 39 33 35 31 35 33 32 32 36 31 36 45 34 43 39 33 Data Ascii: 817AA73FD6DE804DFEC2C2 $92A8C8292F06E18B116DDD50F517040A17D80512 $93515322616E4C93FFB5993936F187B0DE005F8C $9376A43695CBB66C256DCC87932EE885EA9AF5EC $94E412F3EE1978C5E60BF22A15D17F710CCDBE89 $95B6BBE822D883AF830583808BDD4CF9C41C6B10 $95BEE94B0
Nov 3, 2024 09:43:56.548120022 CET	1236	IN	Data Raw: 37 31 35 39 20 24 41 42 37 33 36 36 39 32 35 43 34 34 36 34 32 34 45 37 45 45 33 33 31 37 39 42 45 41 42 34 42 31 32 44 38 36 39 36 42 36 20 24 41 43 32 34 39 43 35 36 43 31 31 46 44 44 46 41 39 45 38 44 45 35 36 42 31 38 32 42 31 33 41 43 38 41 Data Ascii: 7159 $AB7366925C446424E7EE33179BEAB4B12D8696B6 $AC249C56C11FDDFA9E8DE56B182B13AC8A4672BE $ADC35E769B42A3CAB8557E0B5295D3F152595EF8 $ADC776E831EC4609D6D5AC0D5A757B00FC6BFDEE $AE8F944F2843C8072E491BA301B9F6EEFD6BDFDB $B04176E992478C82F1AD7A5DC1D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	50077	45.66.35.11	80	2144	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:57.925117970 CET	172	OUT	GET /tor/server/fp/97e7c6ec9f18b3503eaa0960e009402a26bc7c3a HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	50078	216.218.219.41	80	2144	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:43:58.987032890 CET	175	OUT	GET /tor/server/fp/97e7c6ec9f18b3503eaa0960e009402a26bc7c3a HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:43:59.749380112 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:43:59 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:43:59 GMT Data Raw: 72 6f 75 74 65 72 20 72 65 6c 61 79 6f 6e 30 31 36 39 20 31 38 35 2e 32 32 30 2e 31 30 31 2e 31 36 39 20 31 30 31 36 39 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 65 52 41 63 72 47 71 79 38 47 42 75 69 4f 67 69 57 45 2f 30 6c 45 49 41 44 56 42 45 72 63 34 74 77 71 6f 78 79 39 6b 6a 4f 63 70 57 56 44 41 51 41 67 42 41 41 48 34 35 49 6e 0a 4f 30 35 53 6d 31 53 6c 4d 55 67 5a 61 30 56 77 56 55 4c 49 6d 4d 4c 46 41 38 2f 37 69 53 65 67 38 2f 32 73 79 72 64 76 70 47 57 4b 2b 33 42 65 77 4b 4c 38 6a 6d 76 47 66 65 7a 75 5a 45 51 44 0a 70 47 63 7a 58 6e 61 76 57 74 4d 6d 68 4d 2f 57 53 41 6b 61 6f 66 74 6f 53 56 65 35 68 39 53 4c 6f 6f 35 2b 79 2f 43 78 77 71 48 56 59 65 77 75 45 78 48 2f 70 54 61 35 44 77 41 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 42 2b 4f 53 4a 7a 74 4f 55 70 [TRUNCATED] Data Ascii: router relayon0169 185.220.101.169 10169 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1eRAcrGqy8GBuiOgiWE/0lEIADVBErc4twqoxy9kjOcpWVDAQAgBAAH45InO05Sm1SlMUgZa0VwVULImMLFA8/7iSeg8/2syrdvpGWK+3BewKL8jmvGfezuZEQDpGczXnavWtMmhM/WSAkaoftoSVe5h9SLoo5+y/CxwqHVYewuExH/pTa5DwA=-----END ED25519 CERT-----master-key-ed25519 B+OSJztOUptUpTFIGWtFcFVCyJjCxQPP+4knoPP9rMoor-address [2a0b:f4c2:1::169]:10169platform Tor 0.4.8.8 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-03 05:11:26fingerprint 97E7 C6EC 9F18 B350 3EAA 0960 E009 402A 26BC 7C3Auptime 4752218bandwidth 1073741824 1073741824 20342537extra-info-digest E11790252ECE5AF514C4EDB0C4643AB22E1F6069 nzzDY18j37fe2yfKvMb1+nhi5UtszNmNVvqO3gzZCrkonion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANYOaeBJxnSRb3JoCnXG5+goDH8rYGxShGVcjrv42xbEV+Q69AOViByfN+2+3lVQfdf/tdzJfIfrJkhKsUmGKR00v4k1OKW7WQHzSGBsC5kK5Dp+mKG/UJaufZx6nri [TRUNCATED]
Nov 3, 2024 09:43:59.749392986 CET	212	IN	Data Raw: 39 61 35 79 4c 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d Data Ascii: 9a5yLAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKcrPo9IQz7wsMUVFP62dyBNfp2CdGQrXRnsBZZiOkVnYoFL+gUoQrHRthU4xE1ne3TTJH8HCVBo7Syg913aEV/mMrTJOmrbUhTxRFrlcUpshlXJJdiD7
Nov 3, 2024 09:43:59.749403000 CET	552	IN	Data Raw: 39 70 51 0a 51 4e 6c 71 73 2b 6b 67 4d 6e 77 6a 55 47 53 75 50 46 4f 78 59 55 5a 31 52 2b 2f 62 39 51 6a 35 36 2f 36 39 4e 2b 52 73 6d 33 59 41 5a 39 48 62 46 6e 6a 54 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c Data Ascii: 9pQQNlqs+kgMnwjUGSuPFOxYUZ1R+/b9Qj56/69N+Rsm3YAZ9HbFnjTAgMBAAE=-----END RSA PUBLIC KEY-----onion-key-crosscert-----BEGIN CROSSCERT-----bjQhcPnAwzYxqJ5FAIIWqcZ3Fm1JA3ACtOAYXCj2FBMLO2/8kiIlTr7mzlHou9gr369OwcxBn4rgkgbvKi3WrM9ig5Xwr6GISp/ybS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	50081	45.66.35.11	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:11.158329010 CET	172	OUT	GET /tor/server/fp/450ce7ef6d774c61fdf6bbb53c8ec629cfe499b9 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	50082	193.23.244.244	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:12.197047949 CET	175	OUT	GET /tor/server/fp/450ce7ef6d774c61fdf6bbb53c8ec629cfe499b9 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	50083	193.23.244.244	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:13.260731936 CET	175	OUT	GET /tor/server/fp/450ce7ef6d774c61fdf6bbb53c8ec629cfe499b9 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	50085	45.66.35.11	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:15.988121033 CET	172	OUT	GET /tor/server/fp/f163d4ab6b9ad4dc384f08cb8ce71b98e8a1eef3 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:
Nov 3, 2024 09:44:17.042607069 CET	1236	IN	HTTP/1.0 200 OK Date: Sun, 03 Nov 2024 08:44:16 GMT Content-Type: text/plain X-Your-Address-Is: 96.44.151.123 Content-Encoding: identity Expires: Tue, 05 Nov 2024 08:44:16 GMT Data Raw: 72 6f 75 74 65 72 20 51 75 65 74 7a 61 6c 63 6f 61 74 6c 20 38 39 2e 35 38 2e 32 36 2e 32 31 36 20 38 34 33 30 20 30 20 30 0a 69 64 65 6e 74 69 74 79 2d 65 64 32 35 35 31 39 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 41 51 51 41 42 31 6f 69 41 51 69 59 73 43 77 59 4f 6d 44 53 55 79 42 4e 30 6a 31 59 79 58 6e 77 75 65 4b 64 36 72 64 67 2b 52 33 48 71 31 2b 78 59 77 39 68 41 51 41 67 42 41 44 34 49 62 79 37 0a 43 39 35 68 4c 47 52 67 78 46 6a 45 39 41 31 2b 7a 57 6d 6a 77 4f 63 44 6f 38 64 56 4b 45 65 67 59 64 4e 6f 55 35 44 73 46 67 30 4b 32 4e 6a 36 50 6c 33 56 4a 61 4d 61 31 34 54 77 46 51 41 6e 0a 36 58 58 61 49 62 36 50 38 75 34 37 5a 65 76 2f 32 4b 55 58 61 61 38 2b 72 56 49 41 72 53 59 7a 47 65 46 6b 49 70 35 30 34 50 61 38 63 51 2b 69 71 55 65 66 6f 52 76 2b 6c 67 51 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 45 44 32 35 35 31 39 20 43 45 52 54 2d 2d 2d 2d 2d 0a 6d 61 73 74 65 72 2d 6b 65 79 2d 65 64 32 35 35 31 39 20 2b 43 47 38 75 77 76 65 59 53 78 6b 59 [TRUNCATED] Data Ascii: router Quetzalcoatl 89.58.26.216 8430 0 0identity-ed25519-----BEGIN ED25519 CERT-----AQQAB1oiAQiYsCwYOmDSUyBN0j1YyXnwueKd6rdg+R3Hq1+xYw9hAQAgBAD4Iby7C95hLGRgxFjE9A1+zWmjwOcDo8dVKEegYdNoU5DsFg0K2Nj6Pl3VJaMa14TwFQAn6XXaIb6P8u47Zev/2KUXaa8+rVIArSYzGeFkIp504Pa8cQ+iqUefoRv+lgQ=-----END ED25519 CERT-----master-key-ed25519 +CG8uwveYSxkYMRYxPQNfs1po8DnA6PHVShHoGHTaFMor-address [2a03:4000:62:8:c855:23ff:fef6:50ee]:8430platform Tor 0.4.8.13 on Linuxproto Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4published 2024-11-02 22:27:21fingerprint F163 D4AB 6B9A D4DC 384F 08CB 8CE7 1B98 E8A1 EEF3uptime 324027bandwidth 1073741824 1073741824 6483968extra-info-digest 73F128D33E7F28C01757383152A9BC03FDA33842 Y/WmLKuju+haytzIPtguvg0V6O683r+/PEier1yfl6Monion-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBANvwBDBFTHm9XUpFcvcSkepkHgtwwRaD1Hhf4nawfKKJ8pFssd0HyyAuNe9zpUWDeGLf4RgU3bQR32sWk8xDTv/qApNzAgFyraRXrQ/DFFKDfAvvH2Q [TRUNCATED]
Nov 3, 2024 09:44:17.042625904 CET	1236	IN	Data Raw: 44 63 4c 43 55 68 32 70 67 31 37 7a 45 78 4a 41 4a 76 41 67 4d 42 41 41 45 3d 0a 2d 2d 2d 2d 2d 45 4e 44 20 52 53 41 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 0a 73 69 67 6e 69 6e 67 2d 6b 65 79 0a 2d 2d 2d 2d 2d 42 45 47 49 4e 20 52 53 41 Data Ascii: DcLCUh2pg17zExJAJvAgMBAAE=-----END RSA PUBLIC KEY-----signing-key-----BEGIN RSA PUBLIC KEY-----MIGJAoGBAKw7XddUB9kjLi//Uw/8jBhpM7nIdY7SmS/iv4nBHDgvoy4TsC4Ff1AMcbwpvb/QodW7V9x7BKGM73ghio/GkXykK9a1X3FYJd7SURIAoWOtwfRKi4DP80mUKLMNOzvNsZMf1Q
Nov 3, 2024 09:44:17.042635918 CET	1236	IN	Data Raw: 42 46 38 38 43 35 31 38 30 33 33 41 32 32 38 32 37 45 33 43 34 36 20 24 30 41 37 36 43 30 41 30 41 37 32 31 44 44 42 43 33 32 34 42 37 30 35 41 44 42 46 43 39 35 46 44 38 30 36 41 45 38 35 35 20 24 30 41 46 39 38 32 43 43 37 31 41 30 31 44 39 35 Data Ascii: BF88C518033A22827E3C46 $0A76C0A0A721DDBC324B705ADBFC95FD806AE855 $0AF982CC71A01D95E8959D763D0EC0E5A6C61244 $0B5BC76B3BE7553B229FD3E73F26AED41C31DD19 $0B8EF5F5016926F4245350FB37914E30BF36C528 $0CD666F9C9A40A8CFB1E6B9465597A51D3A1CBF8 $0CF48696F
Nov 3, 2024 09:44:17.042640924 CET	1236	IN	Data Raw: 36 35 32 34 20 24 32 37 44 44 42 39 30 34 44 36 34 39 45 37 41 35 32 36 30 38 38 42 37 45 31 35 42 42 34 32 43 35 33 42 42 35 33 46 36 30 20 24 32 37 46 41 45 39 39 43 30 44 42 41 38 43 44 39 44 42 46 45 34 32 44 32 44 32 34 36 34 42 34 43 36 38 Data Ascii: 6524 $27DDB904D649E7A526088B7E15BB42C53BB53F60 $27FAE99C0DBA8CD9DBFE42D2D2464B4C68EEB00D $28E427C3E7FEB76C58901DCF1565EA44589E437C $2979E1F476F04311E5088B5C12554E8B318F8A7B $2A7FE76900BB03DEAD983EB149BC8FB2F48B137F $2B7F152EAFEF8B99ABF42FBE2ED
Nov 3, 2024 09:44:17.042653084 CET	1236	IN	Data Raw: 31 37 43 44 36 41 32 41 31 41 38 32 37 36 39 34 46 32 30 30 33 41 44 30 39 34 42 30 20 24 33 39 32 42 45 46 44 43 42 30 32 36 41 35 36 38 45 30 37 37 37 38 36 45 37 39 46 44 45 35 38 39 41 39 43 30 45 34 35 31 20 24 33 39 33 43 33 44 42 32 45 46 Data Ascii: 17CD6A2A1A827694F2003AD094B0 $392BEFDCB026A568E077786E79FDE589A9C0E451 $393C3DB2EF81C469CC80A982CC31570423829099 $39CE03A66016B0D69BC6C2A1F362C628436FEF7B $3A282FE698A04D83511D526A525F2C45896454AC $3A72AE52214E2F60182D311CF68B2AC7E1E849B0 $3AD
Nov 3, 2024 09:44:17.042670965 CET	1236	IN	Data Raw: 45 38 46 32 38 45 45 43 41 34 20 24 34 43 45 34 32 32 34 34 36 44 34 33 42 30 41 32 31 46 30 46 39 43 41 31 34 36 44 39 30 37 35 35 38 33 34 30 32 31 30 32 20 24 34 43 45 36 30 38 42 31 31 44 44 41 33 36 36 35 44 41 35 31 41 39 34 35 33 32 46 45 Data Ascii: E8F28EECA4 $4CE422446D43B0A21F0F9CA146D9075583402102 $4CE608B11DDA3665DA51A94532FEE82B9C2EC359 $4EFF3D0C9DE539CF1E27BFC5B3E23BC7CB2D41A9 $4FE78C2FF1468CCF2193E33E2E79066862D52AEC $506B473E673E38EA9FECB7A5A73DD1E1FC37B555 $51691C7926B134AB582F3
Nov 3, 2024 09:44:17.042685986 CET	1236	IN	Data Raw: 35 32 39 31 30 41 35 36 31 43 39 32 46 45 41 41 30 34 32 37 46 33 41 46 30 37 32 39 36 43 45 39 45 30 20 24 35 46 34 36 44 44 41 41 46 43 43 42 43 39 45 46 37 35 30 33 33 36 35 36 30 38 45 46 31 43 36 41 34 39 44 43 35 32 35 30 20 24 35 46 38 41 Data Ascii: 52910A561C92FEAA0427F3AF07296CE9E0 $5F46DDAAFCCBC9EF7503365608EF1C6A49DC5250 $5F8ACD9D6624450926AB0BEDB7DDE9AE43B0D04C $601021EEAF3207505D67DEB77F40A9914A9B8856 $603CE0404FEB3BD363225C56FE429913E540E5FC $6052B7DC00F4E86B760350151665510BB9AE4C0
Nov 3, 2024 09:44:17.042697906 CET	1236	IN	Data Raw: 44 41 35 33 38 36 30 39 37 33 45 45 31 30 44 38 20 24 37 32 30 43 35 35 30 44 35 38 46 41 33 43 39 46 43 43 35 34 39 30 33 36 31 34 34 34 38 32 37 32 31 36 36 38 37 37 41 41 20 24 37 32 38 41 45 44 42 32 44 41 30 33 37 44 39 30 33 32 46 39 36 39 Data Ascii: DA53860973EE10D8 $720C550D58FA3C9FCC54903614448272166877AA $728AEDB2DA037D9032F9697FFA7D9E070783A1F6 $729EBA5E71606D7E870887473384BC803D6A4774 $72AA4CF891689332D9473A4E0140F83DB2210548 $73856192EE21DFFC37F6951861FB1959679A5558 $7413675ED252B29
Nov 3, 2024 09:44:17.042709112 CET	1236	IN	Data Raw: 38 36 35 37 41 39 42 34 38 31 42 41 33 39 41 36 30 43 32 39 45 34 39 41 46 41 44 35 43 45 35 35 32 33 36 37 37 38 31 32 20 24 38 37 36 38 36 44 31 34 39 33 31 35 34 35 38 44 44 35 34 41 46 34 43 34 33 39 32 35 44 39 34 43 46 32 43 42 41 45 37 32 Data Ascii: 8657A9B481BA39A60C29E49AFAD5CE5523677812 $87686D149315458DD54AF4C43925D94CF2CBAE72 $89E1B5DA0C2CDFFE066520FA852448EE0C4F3562 $8A02B09998F74FFE287CB928937E070CA57F1854 $8A522F30A3CEA7C692A0418C936232BA2E54F8B3 $8AB766FB1BE54669559B82165964B8D79
Nov 3, 2024 09:44:17.042721033 CET	1236	IN	Data Raw: 46 36 30 33 32 44 31 33 32 31 31 45 35 44 35 37 36 41 34 34 44 39 20 24 39 37 37 45 37 42 45 41 42 33 38 32 42 44 39 45 31 32 43 36 45 30 42 38 42 41 31 35 45 33 38 36 42 31 35 42 43 37 46 35 20 24 39 37 44 38 30 39 44 46 34 30 41 35 42 34 31 30 Data Ascii: F6032D13211E5D576A44D9 $977E7BEAB382BD9E12C6E0B8BA15E386B15BC7F5 $97D809DF40A5B4102F2C4956A7DB7E709B611832 $982F261EC5D2D7DB89D7D0320009E02E752DFE69 $98AE10E67739CCC9FAD8B223236BBB080C3B0852 $99B6E09CF6084DB3A0D77BC0CFB1C6FC3B65A341 $9A11E4B46
Nov 3, 2024 09:44:17.048444986 CET	1224	IN	Data Raw: 35 30 45 36 20 24 42 30 46 35 41 36 46 39 42 44 45 32 31 41 45 44 42 39 32 41 45 45 41 35 42 43 39 44 30 32 31 43 42 39 36 42 37 44 43 38 20 24 42 31 44 39 30 33 38 42 39 44 34 45 35 36 44 31 41 43 35 43 46 45 32 44 33 42 35 46 45 34 41 32 45 41 Data Ascii: 50E6 $B0F5A6F9BDE21AEDB92AEEA5BC9D021CB96B7DC8 $B1D9038B9D4E56D1AC5CFE2D3B5FE4A2EA006BC6 $B252D9474D8B36FC1299F6DB29C853D68900C394 $B274599CD37F4D5B2C407DC81E478135F3297EFE $B2A4EFD1B3DAD0F5FA127B5C29BBFE625628A6D9 $B4525FBE2F01B4CB2C6435DB515

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	50087	216.218.219.41	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:18.874768019 CET	175	OUT	GET /tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7 HTTP/1.0 Host: 216.218.219.41 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	50088	45.66.35.11	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:19.765129089 CET	172	OUT	GET /tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7 HTTP/1.0 Host: 45.66.35.11 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	50089	193.23.244.244	80	2844	C:\Users\user\Desktop\Payload 94.75 (2).225.exe

Timestamp	Bytes transferred	Direction	Data
Nov 3, 2024 09:44:20.818784952 CET	175	OUT	GET /tor/server/fp/a3a907e3335e5f7325c8197ad9f581c3f46c5fb7 HTTP/1.0 Host: 193.23.244.244 User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 Data Raw: 00 Data Ascii:

Target ID:	0
Start time:	03:41:17
Start date:	03/11/2024
Path:	C:\Users\user\Desktop\Payload 94.75 (2).225.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Imagebase:	0x7ff6e9e00000
File size:	133'642 bytes
MD5 hash:	9C972CB270FB33444A0F8D12D6176C7D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	03:41:17
Start date:	03/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	03:41:25
Start date:	03/11/2024
Path:	C:\Users\user\Desktop\Payload 94.75 (2).225.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Imagebase:	0x7ff6e9e00000
File size:	133'642 bytes
MD5 hash:	9C972CB270FB33444A0F8D12D6176C7D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	03:41:26
Start date:	03/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	03:41:34
Start date:	03/11/2024
Path:	C:\Users\user\Desktop\Payload 94.75 (2).225.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Payload 94.75 (2).225.exe"
Imagebase:	0x7ff6e9e00000
File size:	133'642 bytes
MD5 hash:	9C972CB270FB33444A0F8D12D6176C7D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	03:41:34
Start date:	03/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	46.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	33.3%
Total number of Nodes:	18
Total number of Limit Nodes:	3

Executed Functions

Function 00007FF6E9E027B0 Relevance: 45.6, APIs: 13, Strings: 13, Instructions: 80
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetEnvironmentVariableA.KERNEL32(?,?,?,?,?,?,00007FF6E9E010B1), ref: 00007FF6E9E027DE
LoadLibraryA.KERNEL32(?,?,?,?,?,?,00007FF6E9E010B1), ref: 00007FF6E9E027EF
BCryptOpenAlgorithmProvider.BCRYPT(?,?,?,?,?,?,00007FF6E9E010B1), ref: 00007FF6E9E02809
BCryptSetProperty.BCRYPT ref: 00007FF6E9E0282F
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6E9E02849
BCryptSetProperty.BCRYPT ref: 00007FF6E9E0286F
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6E9E028AA
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6E9E028C4
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6E9E028DE
BCryptSetProperty.BCRYPT ref: 00007FF6E9E02904
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6E9E0291E
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6E9E02938
BCryptOpenAlgorithmProvider.BCRYPT ref: 00007FF6E9E02955

Strings

bcrypt_alt_prov, xrefs: 00007FF6E9E027B7
curve25519, xrefs: 00007FF6E9E028EB
ChainingMode, xrefs: 00007FF6E9E02822, 00007FF6E9E02862
ChainingModeCBC, xrefs: 00007FF6E9E02816
RSA, xrefs: 00007FF6E9E0287C
AES, xrefs: 00007FF6E9E027F8, 00007FF6E9E02838
RNG, xrefs: 00007FF6E9E0290D
SHA1, xrefs: 00007FF6E9E02927
SHA256, xrefs: 00007FF6E9E02944
ECDH, xrefs: 00007FF6E9E028CD
bcrypt_alt.dll, xrefs: 00007FF6E9E027E8
ChainingModeECB, xrefs: 00007FF6E9E02856
ECCCurveName, xrefs: 00007FF6E9E028F7

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: Crypt$AlgorithmOpenProvider$Property$EnvironmentLibraryLoadVariable
String ID: AES$ChainingMode$ChainingModeCBC$ChainingModeECB$ECCCurveName$ECDH$RNG$RSA$SHA1$SHA256$bcrypt_alt.dll$bcrypt_alt_prov$curve25519
API String ID: 2393475537-1894849930
Opcode ID: af65b64e95c7d1159a78f80cdab7d13898f4c9114607b7542d1cf1c4319dcf9a
Instruction ID: cb0ba9164be180ef96ec137e72d54a1a01cfdfc4f56a0ac6a9b6385e86cff142
Opcode Fuzzy Hash: af65b64e95c7d1159a78f80cdab7d13898f4c9114607b7542d1cf1c4319dcf9a
Instruction Fuzzy Hash: B8410D63E18A5392F7109F16E8D4BB12360FF9AB58F815131C68D96435EF7EA24CC70A

Function 00007FF6E9E08748 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 133
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6E9E064B4: free.MSVCRT ref: 00007FF6E9E06518

CryptHashData.ADVAPI32 ref: 00007FF6E9E08849

Part of subcall function 00007FF6E9E09410: CryptGetHashParam.ADVAPI32 ref: 00007FF6E9E09465

free.MSVCRT ref: 00007FF6E9E0886D
CryptDestroyHash.ADVAPI32 ref: 00007FF6E9E0887D
free.MSVCRT ref: 00007FF6E9E0888B
free.MSVCRT ref: 00007FF6E9E08896
CryptHashData.ADVAPI32 ref: 00007FF6E9E088FF
free.MSVCRT ref: 00007FF6E9E0890A
CryptDestroyHash.ADVAPI32 ref: 00007FF6E9E0891A
free.MSVCRT ref: 00007FF6E9E08928
free.MSVCRT ref: 00007FF6E9E08933

Part of subcall function 00007FF6E9E09F1C: CryptDuplicateHash.ADVAPI32 ref: 00007FF6E9E09F46

Strings

circuit::handle_cell() cannot decrypt relay cell, destroying circuit, xrefs: 00007FF6E9E088A9

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$CryptHash$DataDestroy$DuplicateParam
String ID: circuit::handle_cell() cannot decrypt relay cell, destroying circuit
API String ID: 129615695-1619389320
Opcode ID: 2c1156c71683ba85882897d6bf7297c35d08242e109c4a5d08a89e7d305649d4
Instruction ID: e76c4c5ab986e99c136b6cbabf91ae9cfb42998efe3eaf5ea0447a8f2c413228
Opcode Fuzzy Hash: 2c1156c71683ba85882897d6bf7297c35d08242e109c4a5d08a89e7d305649d4
Instruction Fuzzy Hash: 8F511533B04A4189EB10DF66D8906AC2375FF49B88B005532DF8DA3B59DE3AE54AC345

Function 00007FF6E9E0F42C Relevance: 18.1, APIs: 12, Instructions: 121
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

malloc.MSVCRT ref: 00007FF6E9E0F483
memmove.MSVCRT ref: 00007FF6E9E0F4B2
CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F4D9
free.MSVCRT ref: 00007FF6E9E0F4E2
CryptCreateHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F504
memset.MSVCRT ref: 00007FF6E9E0F51F
CryptSetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F532
CryptHashData.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F560
CryptGetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F58B
CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F5AA
CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F5BD
CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F5D0

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: Crypt$Hash$Destroy$Param$CreateDataImportfreemallocmemmovememset
String ID:
API String ID: 1459146999-0
Opcode ID: 3a8452010887efd038ead8f63df07d28fc88ee800229d31c207340e384f9dd2c
Instruction ID: a4df71f5e8b5173c09052de3e11150fb8539d94d91f0895721a8e4c4dc1ecdf8
Opcode Fuzzy Hash: 3a8452010887efd038ead8f63df07d28fc88ee800229d31c207340e384f9dd2c
Instruction Fuzzy Hash: 05518E33A14A5189E720CFA2E8846AD7774FF85B98F108225CE9D53B69DF39D449C704

Function 00007FF6E9E0B17C Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 170
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

free.MSVCRT ref: 00007FF6E9E0B1F3
free.MSVCRT ref: 00007FF6E9E0B1FE
free.MSVCRT ref: 00007FF6E9E0B209

Part of subcall function 00007FF6E9E0B504: free.MSVCRT ref: 00007FF6E9E0B5C4
Part of subcall function 00007FF6E9E0B504: free.MSVCRT ref: 00007FF6E9E0B5CF

memcmp.MSVCRT ref: 00007FF6E9E0B25C

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

free.MSVCRT ref: 00007FF6E9E0B2C4
free.MSVCRT ref: 00007FF6E9E0B2DB
CryptGenRandom.ADVAPI32 ref: 00007FF6E9E0B30E

Strings

circuit::rendezvous_establish() [circuit: %X, state: established], xrefs: 00007FF6E9E0B380
circuit::rendezvous_establish() [circuit: %X, state: not established], xrefs: 00007FF6E9E0B3B8
circuit::rendezvous_establish() [circuit: %X, state: establishing], xrefs: 00007FF6E9E0B323

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$CryptCurrentLocalRandomThreadTime_cwprintf_s_lmemcmp
String ID: circuit::rendezvous_establish() [circuit: %X, state: established]$circuit::rendezvous_establish() [circuit: %X, state: establishing]$circuit::rendezvous_establish() [circuit: %X, state: not established]
API String ID: 2405295690-2993231946
Opcode ID: 2ee226e104c4100ebb5f94452eff5e84fae0cfcd2f20926aa6e915f8750411e9
Instruction ID: 399bf98ae26d37c0cefd1b0cbe74425f8cd15d20fdfbd92138a90603999cf539
Opcode Fuzzy Hash: 2ee226e104c4100ebb5f94452eff5e84fae0cfcd2f20926aa6e915f8750411e9
Instruction Fuzzy Hash: C8719E23B04B4285EB10CF72D8802AD6365FF49B98B584632DF9DA7799DE3AD10AC345

Function 00007FF6E9E0A9C0 Relevance: 17.7, APIs: 8, Strings: 2, Instructions: 157
encryptionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptGenRandom.ADVAPI32 ref: 00007FF6E9E0AA87
free.MSVCRT ref: 00007FF6E9E0AAB1
free.MSVCRT ref: 00007FF6E9E0AABC
free.MSVCRT ref: 00007FF6E9E0AAC7
free.MSVCRT ref: 00007FF6E9E0AAD2
CryptGenRandom.ADVAPI32 ref: 00007FF6E9E0AAF7
inet_ntoa.WS2_32 ref: 00007FF6E9E0AB31
inet_ntoa.WS2_32 ref: 00007FF6E9E0AB92

Strings

gfffffff, xrefs: 00007FF6E9E0AA0A
consensus::download_from_random_authority() [path: http://%s:%u%s], xrefs: 00007FF6E9E0AB61

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$CryptRandominet_ntoa
String ID: consensus::download_from_random_authority() [path: http://%s:%u%s]$gfffffff
API String ID: 3056602706-1112183986
Opcode ID: bb4acce0461a93da88f0aad348ea80980bdc00b89dd7e359fc73ea86ecb6c282
Instruction ID: 800ba5779fad9aa62cced903273a087c30062656a91b14f7ad71417521e5fcaa
Opcode Fuzzy Hash: bb4acce0461a93da88f0aad348ea80980bdc00b89dd7e359fc73ea86ecb6c282
Instruction Fuzzy Hash: 54619D63B14A8586EB00CF7AD8805EC7371FF89B94B105232EE9D976A9EF39D508C744

Function 00007FF6E9E01024 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 24encryptionlibraryCOMMON

Download Yara Rule

APIs

GetEnvironmentVariableA.KERNEL32 ref: 00007FF6E9E01034
LoadLibraryA.KERNEL32 ref: 00007FF6E9E01045
CryptAcquireContextA.ADVAPI32 ref: 00007FF6E9E01069
CryptAcquireContextA.ADVAPI32 ref: 00007FF6E9E0108D

Strings

Microsoft Enhanced RSA and AES Cryptographic Provider, xrefs: 00007FF6E9E01059
csp_alt.dll, xrefs: 00007FF6E9E0103E
Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, xrefs: 00007FF6E9E0107D
csp_alt_prov, xrefs: 00007FF6E9E0102B

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: AcquireContextCrypt$EnvironmentLibraryLoadVariable
String ID: Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider$Microsoft Enhanced RSA and AES Cryptographic Provider$csp_alt.dll$csp_alt_prov
API String ID: 2970050021-3829227113
Opcode ID: ec1cb5cf09f0c3a8500fff5b0d67dc0c0f7cf35773c4f3e9199e699a448cf9ac
Instruction ID: b5df6108fe0d5eb6d4eb9cc9af857f4d4a0ff6d982e79e4e442ea3783826b2f7
Opcode Fuzzy Hash: ec1cb5cf09f0c3a8500fff5b0d67dc0c0f7cf35773c4f3e9199e699a448cf9ac
Instruction Fuzzy Hash: 13F03C66E18A42D2F710CF12EC847A52361BF9AB04F804036C6CEC6165DF3EE24DCB0A

Function 00007FF6E9E1111C Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 100encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E0AF44: malloc.MSVCRT ref: 00007FF6E9E0AF82
Part of subcall function 00007FF6E9E0AF44: memmove.MSVCRT(?,?,?,00007FF6E9E0ACBA), ref: 00007FF6E9E0AF9D
Part of subcall function 00007FF6E9E0AF44: free.MSVCRT ref: 00007FF6E9E0AFA6

free.MSVCRT ref: 00007FF6E9E111CC
free.MSVCRT ref: 00007FF6E9E111D7
free.MSVCRT ref: 00007FF6E9E111E2
CryptGenRandom.ADVAPI32 ref: 00007FF6E9E1120E
free.MSVCRT ref: 00007FF6E9E11265
free.MSVCRT ref: 00007FF6E9E11270

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

Strings

No available routers, xrefs: 00007FF6E9E11248

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$CryptCurrentLocalRandomThreadTime_cwprintf_s_lmallocmemmove
String ID: No available routers
API String ID: 980609513-1591776554
Opcode ID: 8b12a4a985fb8f9f7505a044be01f7a96686c40c1293b68736d54711598bc361
Instruction ID: b000dee695643715180fd738037a81f7e84b1e136fd6d92a8a46e61ace285221
Opcode Fuzzy Hash: 8b12a4a985fb8f9f7505a044be01f7a96686c40c1293b68736d54711598bc361
Instruction Fuzzy Hash: B0414923B04A4695EB00DF66D8843EC2321FF89B88F040132DF8DA7A99DF39E559C345

Function 00007FF6E9E099F4 Relevance: 6.2, APIs: 4, Instructions: 159encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E093B0: CryptCreateHash.ADVAPI32 ref: 00007FF6E9E093D4

CryptHashData.ADVAPI32 ref: 00007FF6E9E09B76
CryptHashData.ADVAPI32 ref: 00007FF6E9E09B9F

Part of subcall function 00007FF6E9E0A16C: memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF6E9E09BDE), ref: 00007FF6E9E0A1FB
Part of subcall function 00007FF6E9E0A16C: CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF6E9E09BDE), ref: 00007FF6E9E0A228

Part of subcall function 00007FF6E9E09F60: memset.MSVCRT ref: 00007FF6E9E09F7A

CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E09BF8
CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E09C55

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: Crypt$Hash$DataDestroy$CreateImportmemmovememset
String ID:
API String ID: 2495588091-0
Opcode ID: bacd94a34f9b07d7788126d4c5be5f7ffe51b1c9a5df3a10e40392ff2fbe9071
Instruction ID: 990e8228ce3b8bb5cc24bec1f1ca5b059a977dc30b6f6183357929be6fc16c18
Opcode Fuzzy Hash: bacd94a34f9b07d7788126d4c5be5f7ffe51b1c9a5df3a10e40392ff2fbe9071
Instruction Fuzzy Hash: B5716A33A19B819AD720CF64F88069E73B4FB89758F115225EBCC53A59EF38D199CB04

Function 00007FF6E9E061C4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31networkCOMMON

Download Yara Rule

APIs

recv.WS2_32 ref: 00007FF6E9E061E1
WSAGetLastError.WS2_32 ref: 00007FF6E9E06201

Strings

tcp_socket::read_impl recv error: %i, xrefs: 00007FF6E9E0620A

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: ErrorLastrecv
String ID: tcp_socket::read_impl recv error: %i
API String ID: 2514157807-4185223013
Opcode ID: 0de81a523676fafa1a5b36a7287f1b3a87dd7633110d12db186c96da9e59cc4d
Instruction ID: 3b91a1c3d48d1f4ca169e5ed8a210297d384c942fe08b55a875b171deefdfcad
Opcode Fuzzy Hash: 0de81a523676fafa1a5b36a7287f1b3a87dd7633110d12db186c96da9e59cc4d
Instruction Fuzzy Hash: F2F0A422A08A4781DB508F26F5C07782360AF59FE8B045330CBAD876E5EF2DD445C305

Function 00007FF6E9E0A16C Relevance: 3.1, APIs: 2, Instructions: 52encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF6E9E09BDE), ref: 00007FF6E9E0A1FB
CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,?,000000D8,00007FF6E9E09BDE), ref: 00007FF6E9E0A228

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptImportmemmove
String ID:
API String ID: 3388866568-0
Opcode ID: b0d9a24e77b2941c7b9f6f5f5800f2d24bd67ae383bc772e3f8ef66be7dcaf21
Instruction ID: 9c24ad49cebb4402e0469b20fe46ce3f7af0d85ab233f4e274cdd1771c0d44e9
Opcode Fuzzy Hash: b0d9a24e77b2941c7b9f6f5f5800f2d24bd67ae383bc772e3f8ef66be7dcaf21
Instruction Fuzzy Hash: 3E216933619B4086D720CF25F88465EB3B4FB59B90B108225DBED43B54DF7AE599CB00

Function 00007FF6E9E093B0 Relevance: 1.5, APIs: 1, Instructions: 14encryptionCOMMON

Download Yara Rule

APIs

CryptCreateHash.ADVAPI32 ref: 00007FF6E9E093D4

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CreateCryptHash
String ID:
API String ID: 4184778727-0
Opcode ID: 98d20867d7066a821d93434f146e074bcc444b41e4472ce19979e74656ec95c8
Instruction ID: 513c2a0c589a510773146b791c7e0f080ff862e42997a2b18a6e5a0b5a902d7b
Opcode Fuzzy Hash: 98d20867d7066a821d93434f146e074bcc444b41e4472ce19979e74656ec95c8
Instruction Fuzzy Hash: 38D05E26A2854683E7604B61A811B255250BF98B84F044030CF8C47B14CE3D95158A08

Function 00007FF6E9E0B5F0 Relevance: 33.6, APIs: 4, Strings: 15, Instructions: 385
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

inet_ntoa.WS2_32 ref: 00007FF6E9E0B660

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

Part of subcall function 00007FF6E9E01BAC: free.MSVCRT ref: 00007FF6E9E01BC2

free.MSVCRT ref: 00007FF6E9E0B88A
inet_ntoa.WS2_32 ref: 00007FF6E9E0B8EE
inet_ntoa.WS2_32 ref: 00007FF6E9E0B711

Part of subcall function 00007FF6E9E06E8C: free.MSVCRT ref: 00007FF6E9E06ED2

Strings

Hidden service descriptor contains no introduction points..., xrefs: 00007FF6E9E0BB85
Extending circuit for hidden service, connecting to responsible directory '%s' (%s:%u), xrefs: 00007FF6E9E0B741
Hidden service descriptor is valid..., xrefs: 00007FF6E9E0BAAC
Extended..., xrefs: 00007FF6E9E0B7A3
/tor/rendezvous2/%s, xrefs: 00007FF6E9E0B845
Creating circuit for hidden service (try #%u), connecting to '%s' (%s:%u), xrefs: 00007FF6E9E0B6A1
gfffffff, xrefs: 00007FF6E9E0BB68
Error while establishing the directory stream, xrefs: 00007FF6E9E0B7D3
Connected..., xrefs: 00007FF6E9E0B6C8
Hidden service descriptor is invalid..., xrefs: 00007FF6E9E0B9F0
404 Not found, xrefs: 00007FF6E9E0B998
Sending request for hidden service descriptor..., xrefs: 00007FF6E9E0B8A5
Error while extending the directory circuit, xrefs: 00007FF6E9E0B77C
hidden_service::fetch_hidden_service_descriptor() [path: %s], xrefs: 00007FF6E9E0B894
Hidden service descriptor received..., xrefs: 00007FF6E9E0B963

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: freeinet_ntoa$CurrentLocalThreadTime_cwprintf_s_l
String ID: Connected...$Creating circuit for hidden service (try #%u), connecting to '%s' (%s:%u)$Error while establishing the directory stream$Error while extending the directory circuit$Extended...$Extending circuit for hidden service, connecting to responsible directory '%s' (%s:%u)$Hidden service descriptor contains no introduction points...$Hidden service descriptor is invalid...$Hidden service descriptor is valid...$Hidden service descriptor received...$Sending request for hidden service descriptor...$/tor/rendezvous2/%s$404 Not found$gfffffff$hidden_service::fetch_hidden_service_descriptor() [path: %s]
API String ID: 1332336199-2986099802
Opcode ID: ac90d79e4faa7228a7989787331f40e6b425d15846be7a25f2aac41549bb3984
Instruction ID: bb71796548bf8032f891a313653e69daed035503846798a7aeb2f5538f76adb2
Opcode Fuzzy Hash: ac90d79e4faa7228a7989787331f40e6b425d15846be7a25f2aac41549bb3984
Instruction Fuzzy Hash: AB027963A08A8186EB10CF66D8903ED6360FF89B94F544132DB8D877A9EF3EE545C305

Function 00007FF6E9E01160 Relevance: 26.4, APIs: 10, Strings: 5, Instructions: 154
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memcmp.MSVCRT ref: 00007FF6E9E011CD
memcmp.MSVCRT ref: 00007FF6E9E011FB
memcmp.MSVCRT ref: 00007FF6E9E0122D
memcmp.MSVCRT ref: 00007FF6E9E01260
memcmp.MSVCRT ref: 00007FF6E9E01292
GetConsoleWindow.KERNEL32 ref: 00007FF6E9E012A5
GetConsoleWindow.KERNELBASE ref: 00007FF6E9E012B2
ShowWindow.USER32 ref: 00007FF6E9E012BD
free.MSVCRT ref: 00007FF6E9E0132F
SleepEx.KERNELBASE ref: 00007FF6E9E01386

Strings

info, xrefs: 00007FF6E9E01223
debug, xrefs: 00007FF6E9E011F1
error, xrefs: 00007FF6E9E01288
warning, xrefs: 00007FF6E9E01256
cached-consensus, xrefs: 00007FF6E9E012C8

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memcmp$Window$Console$ShowSleepfree
String ID: cached-consensus$debug$error$info$warning
API String ID: 4256011749-3964234580
Opcode ID: 6aebf3955f5852d03141b54ac61140722e436ed26eee0c70a191a1ba19a04952
Instruction ID: 6bb2c7ff1e56a43090f0af18bd7fb0128fcdf322274ecf9622bd8d021d596690
Opcode Fuzzy Hash: 6aebf3955f5852d03141b54ac61140722e436ed26eee0c70a191a1ba19a04952
Instruction Fuzzy Hash: 67616A62E08B469AFB10DF61D8C03BC33A1AF49758F410231DB9D97695EF3AA549C34A

Function 00007FF6E9E0F654 Relevance: 23.1, APIs: 11, Strings: 2, Instructions: 346
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6E9E01BAC: free.MSVCRT ref: 00007FF6E9E01BC2

malloc.MSVCRT ref: 00007FF6E9E0F90B
sscanf.MSVCRT ref: 00007FF6E9E0F95C
sscanf.MSVCRT ref: 00007FF6E9E0F982
InitializeCriticalSection.KERNEL32 ref: 00007FF6E9E0F9C3
inet_addr.WS2_32 ref: 00007FF6E9E0F9EB
free.MSVCRT ref: 00007FF6E9E0FAD8
free.MSVCRT ref: 00007FF6E9E0FAE3
memset.MSVCRT ref: 00007FF6E9E0FB5C
sscanf.MSVCRT ref: 00007FF6E9E0FB97
_mkgmtime.MSVCRT ref: 00007FF6E9E0FBAF
time.MSVCRT ref: 00007FF6E9E0FBEA

Strings

gfffffff, xrefs: 00007FF6E9E0FAA2
%04d-%02d-%02d %02d:%02d:%02d, xrefs: 00007FF6E9E0FB8D

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: freesscanf$CriticalInitializeSection_mkgmtimeinet_addrmallocmemsettime
String ID: %04d-%02d-%02d %02d:%02d:%02d$gfffffff
API String ID: 1162402541-2325642954
Opcode ID: b8294c291af995fff443a20bb04a3435341f499c10ad9f9a9cc1ab6ab2549de2
Instruction ID: 0c8ddf83692acefbd8fa1629fa1005ebcc4207f149073ac666530b5c84e04648
Opcode Fuzzy Hash: b8294c291af995fff443a20bb04a3435341f499c10ad9f9a9cc1ab6ab2549de2
Instruction Fuzzy Hash: EFF1BC33A08B8296EB148F65E8802ED77A0FF45794F404636DB8D97B98EF39D198C305

Function 00007FF6E9E11590 Relevance: 19.8, APIs: 2, Strings: 11, Instructions: 309
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memcmp.MSVCRT ref: 00007FF6E9E1166C

Part of subcall function 00007FF6E9E01BAC: free.MSVCRT ref: 00007FF6E9E01BC2

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

malloc.MSVCRT ref: 00007FF6E9E11876

Strings

Error while creating the onion stream, xrefs: 00007FF6E9E11A1A
Creating stream..., xrefs: 00007FF6E9E117B6
https://, xrefs: 00007FF6E9E11665
Response received..., xrefs: 00007FF6E9E119BA
Creating onion stream..., xrefs: 00007FF6E9E11717
.onion, xrefs: 00007FF6E9E116A8
Created..., xrefs: 00007FF6E9E11830
Error while establishing TLS with '%s', xrefs: 00007FF6E9E118E7
Sending request..., xrefs: 00007FF6E9E11845
Accessing '%s', xrefs: 00007FF6E9E11681
Received empty response!, xrefs: 00007FF6E9E119C8

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CurrentLocalThreadTime_cwprintf_s_lfreemallocmemcmp
String ID: .onion$Accessing '%s'$Created...$Creating onion stream...$Creating stream...$Error while creating the onion stream$Error while establishing TLS with '%s'$Received empty response!$Response received...$Sending request...$https://
API String ID: 3650025451-2257922318
Opcode ID: d5653f286ae6193be0b1bf6ede19303c3f193cb3d33bf124b4fe65347f0b8752
Instruction ID: c4cd1501be2d126e678115c98b083184ae440165f354b5c0a396f5ed90fecf80
Opcode Fuzzy Hash: d5653f286ae6193be0b1bf6ede19303c3f193cb3d33bf124b4fe65347f0b8752
Instruction Fuzzy Hash: B2E14837A18B8286EB00CF65E4802AD73B4FF89788B504126EF8D97B58EF39D559C345

Function 00007FF6E9E0605C Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 86
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

gethostbyname.WS2_32 ref: 00007FF6E9E0607A
htons.WS2_32 ref: 00007FF6E9E06099
memmove.MSVCRT(?,?,?,?,?,?,?,00007FF6E9E055E6), ref: 00007FF6E9E060B5
socket.WS2_32 ref: 00007FF6E9E060CA
setsockopt.WS2_32 ref: 00007FF6E9E06102
setsockopt.WS2_32 ref: 00007FF6E9E0614C
connect.WS2_32 ref: 00007FF6E9E06179
WSAGetLastError.WS2_32 ref: 00007FF6E9E06184

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

Strings

tcp_socket::connect connect error: %i, xrefs: 00007FF6E9E0618A
tcp_socket::connect setsockopt SO_RCVTIMEO error: %i, xrefs: 00007FF6E9E0611B
tcp_socket::connect setsockopt SO_SNDTIMEO error: %i, xrefs: 00007FF6E9E06159

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: setsockopt$CurrentErrorLastLocalThreadTime_cwprintf_s_lconnectgethostbynamehtonsmemmovesocket
String ID: tcp_socket::connect connect error: %i$tcp_socket::connect setsockopt SO_RCVTIMEO error: %i$tcp_socket::connect setsockopt SO_SNDTIMEO error: %i
API String ID: 2396662901-3524291084
Opcode ID: eeae2f9c6837806d00ce99c45ddce5d3dd9529a0fa26bceb3562cab75d4b1bff
Instruction ID: 8802f529dd66a30a7990a8e454419cda2549fb7b36c718f1dee2170575d78964
Opcode Fuzzy Hash: eeae2f9c6837806d00ce99c45ddce5d3dd9529a0fa26bceb3562cab75d4b1bff
Instruction Fuzzy Hash: 2F41B376B0864282EB108F22E4806AE77A1FF89F94F040235EB9D83B95DF7DD549C745

Function 00007FF6E9E0EDE0 Relevance: 18.2, APIs: 7, Strings: 5, Instructions: 232
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6E9E0F42C: malloc.MSVCRT ref: 00007FF6E9E0F483
Part of subcall function 00007FF6E9E0F42C: memmove.MSVCRT ref: 00007FF6E9E0F4B2
Part of subcall function 00007FF6E9E0F42C: CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F4D9
Part of subcall function 00007FF6E9E0F42C: free.MSVCRT ref: 00007FF6E9E0F4E2
Part of subcall function 00007FF6E9E0F42C: CryptCreateHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F504
Part of subcall function 00007FF6E9E0F42C: memset.MSVCRT ref: 00007FF6E9E0F51F
Part of subcall function 00007FF6E9E0F42C: CryptSetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F532
Part of subcall function 00007FF6E9E0F42C: CryptHashData.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F560
Part of subcall function 00007FF6E9E0F42C: CryptGetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F58B
Part of subcall function 00007FF6E9E0F42C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F5AA

Part of subcall function 00007FF6E9E0F42C: CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F5BD
Part of subcall function 00007FF6E9E0F42C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F5D0

memcmp.MSVCRT ref: 00007FF6E9E0F0FF

Part of subcall function 00007FF6E9E0F208: free.MSVCRT ref: 00007FF6E9E0F37E

free.MSVCRT ref: 00007FF6E9E0F19C
free.MSVCRT ref: 00007FF6E9E0F1A7
free.MSVCRT ref: 00007FF6E9E0F1B5
free.MSVCRT ref: 00007FF6E9E0F1C0
free.MSVCRT ref: 00007FF6E9E0F1CE
free.MSVCRT ref: 00007FF6E9E0F1DC

Strings

ntor-curve25519-sha256-1:mac, xrefs: 00007FF6E9E0F0AA
Server, xrefs: 00007FF6E9E0F047
ntor-curve25519-sha256-1:key_extract, xrefs: 00007FF6E9E0F108
ntor-curve25519-sha256-1:verify, xrefs: 00007FF6E9E0EFAB
ntor-curve25519-sha256-1:key_expand, xrefs: 00007FF6E9E0F12B

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: Cryptfree$Hash$Destroy$Param$CreateDataImportmallocmemcmpmemmovememset
String ID: Server$ntor-curve25519-sha256-1:key_expand$ntor-curve25519-sha256-1:key_extract$ntor-curve25519-sha256-1:mac$ntor-curve25519-sha256-1:verify
API String ID: 1927060387-216614166
Opcode ID: 4f55eaf35c687edb857eb87d056318589da62ab1790a1c6caf11d6237602eccd
Instruction ID: b5f7df17844577813fedf721ec57fff955300b7b0f484d8186c39e2988270d4d
Opcode Fuzzy Hash: 4f55eaf35c687edb857eb87d056318589da62ab1790a1c6caf11d6237602eccd
Instruction Fuzzy Hash: 42D1F933929F8599D7408F25E8806EDB3B4FB99758F106226EBCD52B29EF38D194C740

Function 00007FF6E9E0894C Relevance: 16.7, APIs: 2, Strings: 9, Instructions: 245
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

free.MSVCRT ref: 00007FF6E9E08D02
free.MSVCRT ref: 00007FF6E9E08D0D

Strings

circuit_node::increment_package_window() [ _package_window = %u ], xrefs: 00007FF6E9E08A5D
circuit::handle_extended2_cell() extend node [ %s ] has invalid crypto state, xrefs: 00007FF6E9E08CE1
tor_socket::recv_cell() [circuit: %i%s [%X], stream: %u, command: %u, relay_command: %u, payload_size: %u], xrefs: 00007FF6E9E089DE
circuit::handle_extended2_cell() extend node is null, xrefs: 00007FF6E9E08C43
(MSB set), xrefs: 00007FF6E9E089A7
tor_socket::recv_cell() !! unhandled relay cell [ relay_command: %u ], xrefs: 00007FF6E9E08BEE
tor_stream::increment_package_window() [ _package_window = %u ], xrefs: 00007FF6E9E08A92
circuit::handle_relay_end_cell() [stream: %u, reason: %u], xrefs: 00007FF6E9E08B42
circuit::handle_relay_truncated_cell() destroying circuit, xrefs: 00007FF6E9E08BBE

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_l
String ID: (MSB set)$circuit::handle_extended2_cell() extend node [ %s ] has invalid crypto state$circuit::handle_extended2_cell() extend node is null$circuit::handle_relay_end_cell() [stream: %u, reason: %u]$circuit::handle_relay_truncated_cell() destroying circuit$circuit_node::increment_package_window() [ _package_window = %u ]$tor_socket::recv_cell() !! unhandled relay cell [ relay_command: %u ]$tor_socket::recv_cell() [circuit: %i%s [%X], stream: %u, command: %u, relay_command: %u, payload_size: %u]$tor_stream::increment_package_window() [ _package_window = %u ]
API String ID: 2601393797-2081185039
Opcode ID: 0538e25982fe5b97a3f2e18869d2afb9193fe3ce91f42f758201cd917e08753e
Instruction ID: 6734bf2ca5c68ff11ecd79a7c83bc4ae4fb0e8a9fcbf6ec9a3288adb0f0c57f9
Opcode Fuzzy Hash: 0538e25982fe5b97a3f2e18869d2afb9193fe3ce91f42f758201cd917e08753e
Instruction Fuzzy Hash: 53B1BD33A0868282E7148F6594C03BD63A1FF85B90F448135DB8D97BA9EF7EE505C74A

Function 00007FF6E9E11294 Relevance: 16.0, APIs: 2, Strings: 7, Instructions: 201
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

inet_ntoa.WS2_32 ref: 00007FF6E9E112DB
inet_ntoa.WS2_32 ref: 00007FF6E9E11434

Strings

Error while connecting!, xrefs: 00007FF6E9E11423
Extended..., xrefs: 00007FF6E9E114FB
Connected..., xrefs: 00007FF6E9E11404
Extending to node #%u: '%s' (%s:%u), xrefs: 00007FF6E9E11487
Connecting to node #%u: '%s' (%s:%u), xrefs: 00007FF6E9E1132E
Error when extending!, xrefs: 00007FF6E9E11559
Error while creating circuit!, xrefs: 00007FF6E9E11412

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: inet_ntoa
String ID: Connected...$Connecting to node #%u: '%s' (%s:%u)$Error when extending!$Error while connecting!$Error while creating circuit!$Extended...$Extending to node #%u: '%s' (%s:%u)
API String ID: 1879540557-1880961314
Opcode ID: 85c262f1bc1cf95f391f4a5388b4ae60011f5c3f4865de7639e9966e2911a433
Instruction ID: d89739d93c548472b756bf4103c29bc1dcfd00a1be909b0e4960b0251f805610
Opcode Fuzzy Hash: 85c262f1bc1cf95f391f4a5388b4ae60011f5c3f4865de7639e9966e2911a433
Instruction Fuzzy Hash: 70917B77A18B4186EB10CF56D4802AD73A1FF46B90B044136DB9E93B94DF3EE855C349

Function 00007FF6E9E013B4 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 164
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNEL32 ref: 00007FF6E9E013F4
RegOpenKeyExA.KERNELBASE ref: 00007FF6E9E01423
RegQueryInfoKeyA.ADVAPI32 ref: 00007FF6E9E01472
RegCloseKey.ADVAPI32 ref: 00007FF6E9E01481
RegEnumValueA.ADVAPI32 ref: 00007FF6E9E01509
free.MSVCRT ref: 00007FF6E9E015BE
RegSetValueExA.KERNELBASE ref: 00007FF6E9E015F1
RegCloseKey.KERNELBASE ref: 00007FF6E9E015FC

Strings

SOFTWARE\Microsoft\Windows\CurrentVersion\Run, xrefs: 00007FF6E9E01415

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CloseValue$EnumFileInfoModuleNameOpenQueryfree
String ID: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
API String ID: 2654051921-3913687870
Opcode ID: d83ce38537b77fa389110b2b141a9d4c59facbcaa7e63bafc99b2f0c3a6f0ee0
Instruction ID: a29daf7ad33248ad16b924454dffdfab4c65b7c9ea1eb961b7a8537d11bef842
Opcode Fuzzy Hash: d83ce38537b77fa389110b2b141a9d4c59facbcaa7e63bafc99b2f0c3a6f0ee0
Instruction Fuzzy Hash: A1714B33A18B4189E710CF65E8806AD77B5FF89798F100225EB9D97BA8EF39D544CB04

Function 00007FF6E9E12520 Relevance: 15.2, APIs: 3, Strings: 7, Instructions: 201
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

sscanf.MSVCRT ref: 00007FF6E9E1269C
malloc.MSVCRT ref: 00007FF6E9E12719
free.MSVCRT ref: 00007FF6E9E1279A

Part of subcall function 00007FF6E9E01ED0: free.MSVCRT ref: 00007FF6E9E01F12

Strings

Get pings..., xrefs: 00007FF6E9E12568
gfffffff, xrefs: 00007FF6E9E12621
%s, xrefs: 00007FF6E9E125AD
gfffffff, xrefs: 00007FF6E9E127B8
cached-consensus, xrefs: 00007FF6E9E1252D
bad URL info: %s, xrefs: 00007FF6E9E12662
http://pm2pavba27wr4m34.onion/command.txt?sh11, xrefs: 00007FF6E9E1258A

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_lmallocsscanf
String ID: %s$Get pings...$bad URL info: %s$cached-consensus$gfffffff$gfffffff$http://pm2pavba27wr4m34.onion/command.txt?sh11
API String ID: 3228243443-2334344250
Opcode ID: b68d5b157cb4886688903b006b4151e6412328640db98cc885b77073584c03b6
Instruction ID: 09b46719e1ede0619141cf847ad836082d30317effa3d37020eeb53684bcb4ff
Opcode Fuzzy Hash: b68d5b157cb4886688903b006b4151e6412328640db98cc885b77073584c03b6
Instruction Fuzzy Hash: 90919A73A04B4586EB10CF66E4803A97360FF48B98F404632EB9D977A4EF39D549C345

Function 00007FF6E9E0CA50 Relevance: 13.7, APIs: 4, Strings: 5, Instructions: 211COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6E9E0CAE0
free.MSVCRT ref: 00007FF6E9E0CC76
free.MSVCRT ref: 00007FF6E9E0CD20
free.MSVCRT ref: 00007FF6E9E0CD2B

Strings

socket_buffer.read(payload.get_buffer(), payload_size) != payload_size, xrefs: 00007FF6E9E0CC5C
socket_buffer.read(command) != sizeof(cell_command), xrefs: 00007FF6E9E0CB5A
socket_buffer.read<payload_size_type>(payload_size) != sizeof(payload_size_type), xrefs: 00007FF6E9E0CBF7
socket_buffer.read(circuit_id) != sizeof(circuit_id_type), xrefs: 00007FF6E9E0CBC3
socket_buffer.read(circuit_id_v3) != sizeof(circuit_id_v3_type), xrefs: 00007FF6E9E0CAC1

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$memset
String ID: socket_buffer.read(circuit_id) != sizeof(circuit_id_type)$socket_buffer.read(circuit_id_v3) != sizeof(circuit_id_v3_type)$socket_buffer.read(command) != sizeof(cell_command)$socket_buffer.read(payload.get_buffer(), payload_size) != payload_size$socket_buffer.read<payload_size_type>(payload_size) != sizeof(payload_size_type)
API String ID: 2717317152-1323880483
Opcode ID: 8618753bb074736371d3759156b7bb80da331e751738d949680ebec2e04cf989
Instruction ID: 45c5ab1c4850693bb688e80a35b3818d8f0f6411390ca07e6cca83b7c01d910d
Opcode Fuzzy Hash: 8618753bb074736371d3759156b7bb80da331e751738d949680ebec2e04cf989
Instruction Fuzzy Hash: 4791AD63B09A818AE710CF75D4812AC37B1FF04B98B144621DF9DA3B98EF39C519C349

Function 00007FF6E9E07134 Relevance: 13.7, APIs: 4, Strings: 5, Instructions: 159COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6E9E0723E
free.MSVCRT ref: 00007FF6E9E07326

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

Strings

circuit::create_ntor() [or: %s does not support NTOR handshake], xrefs: 00007FF6E9E07185
circuit::create_ntor() [or: %s, state: destroyed], xrefs: 00007FF6E9E07368
circuit::create_ntor() [or: %s, state: created], xrefs: 00007FF6E9E07358
circuit::create_ntor() [or: %s, state: creating], xrefs: 00007FF6E9E0719B
circuit::create_ntor() extend node isn't null, xrefs: 00007FF6E9E071CE

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_l
String ID: circuit::create_ntor() [or: %s does not support NTOR handshake]$circuit::create_ntor() [or: %s, state: created]$circuit::create_ntor() [or: %s, state: creating]$circuit::create_ntor() [or: %s, state: destroyed]$circuit::create_ntor() extend node isn't null
API String ID: 2601393797-3117506111
Opcode ID: b85c1fceb3b7fc8e2e5d05cbff03d27e9bcc47e775089bc632f47cce129d1470
Instruction ID: 79fe1ca249b176a886842a686618c71dae0146fb2eb4064060967739aff82801
Opcode Fuzzy Hash: b85c1fceb3b7fc8e2e5d05cbff03d27e9bcc47e775089bc632f47cce129d1470
Instruction Fuzzy Hash: 9C715A23A08B4585E710CF61E8803ED33A1FF89B98F404136DB9C97799EE3AD649C349

Function 00007FF6E9E0C4E0 Relevance: 13.6, APIs: 5, Strings: 4, Instructions: 146COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6E9E0C523
free.MSVCRT ref: 00007FF6E9E0C635
free.MSVCRT ref: 00007FF6E9E0C663

Strings

tor_socket::recv_net_info(), xrefs: 00007FF6E9E0C6B7
Invalid handshake, xrefs: 00007FF6E9E0C669
tor_socket::recv_versions(), xrefs: 00007FF6E9E0C63B
tor_socket::send_versions(), xrefs: 00007FF6E9E0C5DB

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$malloc
String ID: Invalid handshake$tor_socket::recv_net_info()$tor_socket::recv_versions()$tor_socket::send_versions()
API String ID: 2190258309-3974360583
Opcode ID: 4803aa52bb1eabd93a66ea38f10aad959ed91127a4719796954a5d1ccdb0884b
Instruction ID: eb0b3ace59f1ae50b78a246a6a30c43d97a99954f4fcb744b4bb02e5e16a0eab
Opcode Fuzzy Hash: 4803aa52bb1eabd93a66ea38f10aad959ed91127a4719796954a5d1ccdb0884b
Instruction Fuzzy Hash: 1D518D23B18A5185EB14DF61D8812FC2361BF89B98B044235DF8EA7B95EF3DD406C306

Function 00007FF6E9E073B8 Relevance: 12.3, APIs: 3, Strings: 5, Instructions: 271COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6E9E074C5

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

Strings

circuit::extend_ntor() [or: %s, state: destroyed], xrefs: 00007FF6E9E0774E
circuit::extend_ntor() extend node isn't null, xrefs: 00007FF6E9E07450
circuit::extend_ntor() [or: %s, state: extended], xrefs: 00007FF6E9E0773E
circuit::extend_ntor() [or: %s, state: extending], xrefs: 00007FF6E9E0741C
circuit::extend_ntor() [or: %s does not support NTOR handshake], xrefs: 00007FF6E9E07404

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CurrentLocalThreadTime_cwprintf_s_lfree
String ID: circuit::extend_ntor() [or: %s does not support NTOR handshake]$circuit::extend_ntor() [or: %s, state: destroyed]$circuit::extend_ntor() [or: %s, state: extended]$circuit::extend_ntor() [or: %s, state: extending]$circuit::extend_ntor() extend node isn't null
API String ID: 489237203-3214179444
Opcode ID: 8fd3c4def8bf3717c6ae74379f7f5dcd0d1392359a38d429e1aebef2de3274ad
Instruction ID: e2ec4a676d916c0d57ddb93c9711ad0117a6c427a16808195638508447471ea7
Opcode Fuzzy Hash: 8fd3c4def8bf3717c6ae74379f7f5dcd0d1392359a38d429e1aebef2de3274ad
Instruction Fuzzy Hash: 17C16263B04A458AEB00CF75D8842EC73B1FF45BA8B544232DBAD97B99EE39D105C345

Function 00007FF6E9E05A64 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 125COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6E9E05AE9
malloc.MSVCRT ref: 00007FF6E9E05AFB
InitSecurityInterfaceA.SECUR32 ref: 00007FF6E9E05B18
atexit.MSVCRT ref: 00007FF6E9E05B2C
memset.MSVCRT ref: 00007FF6E9E05C2C

Strings

Microsoft Unified Security Protocol Provider, xrefs: 00007FF6E9E05C6A

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: malloc$InitInterfaceSecurityatexitmemset
String ID: Microsoft Unified Security Protocol Provider
API String ID: 1208695405-238809041
Opcode ID: 062a7dcbb5eadb261bdfbfe3365e78cafdb4f44dc0e02de7de984dcda699f127
Instruction ID: 1505008f310cb3b46fbc229eb183efc827bf7b8c75b737ead1ca7ad1b8ef42d0
Opcode Fuzzy Hash: 062a7dcbb5eadb261bdfbfe3365e78cafdb4f44dc0e02de7de984dcda699f127
Instruction Fuzzy Hash: CA51D473A04B808AE3508F64E88039D37B9FB49B58F148639DE9D97798EF39C5A4C354

Function 00007FF6E9E0A42C Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 153COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE ref: 00007FF6E9E0A481
free.MSVCRT ref: 00007FF6E9E0A59F
time.MSVCRT ref: 00007FF6E9E0A5D4

Strings

/tor/status-vote/current/consensus, xrefs: 00007FF6E9E0A49E
cached-consensus, xrefs: 00007FF6E9E0A438

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: AttributesFilefreetime
String ID: /tor/status-vote/current/consensus$cached-consensus
API String ID: 1606450062-1934959206
Opcode ID: f64d5b6393a68ee7bc559004e0857bb9b0f85b1e9cc8fa128122772b920ccc62
Instruction ID: 73e053f4c1280b7078f459ffb7cf1bde7be6c9de3a6ada2b2da3d5a8605bdaa8
Opcode Fuzzy Hash: f64d5b6393a68ee7bc559004e0857bb9b0f85b1e9cc8fa128122772b920ccc62
Instruction Fuzzy Hash: 6F613663F08B4599E710CFA5D4842AC7371BF44B98B004636DF8DA7AA8EF39D596C384

Function 00007FF6E9E07EE0 Relevance: 7.6, APIs: 2, Strings: 3, Instructions: 117COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6E9E0805F
free.MSVCRT ref: 00007FF6E9E0806A

Strings

tor_socket::send_cell() [circuit: %i%s [%X], stream: %u, command: %i, relay_command: %i], xrefs: 00007FF6E9E07FF0
circuit::send_relay_cell() attempt to send cell to non-existent stream-id: %u, xrefs: 00007FF6E9E07F90
(MSB set), xrefs: 00007FF6E9E07FBC

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free
String ID: (MSB set)$circuit::send_relay_cell() attempt to send cell to non-existent stream-id: %u$tor_socket::send_cell() [circuit: %i%s [%X], stream: %u, command: %i, relay_command: %i]
API String ID: 1294909896-2545454300
Opcode ID: 6cb525eafdbe074bd81a2014da1d4c21dedde1901dc51fafceb222652d456062
Instruction ID: 1c48af38373ea59737da22d5a95345adf8ef9ab21f9e5be3e31bf7e5bac48447
Opcode Fuzzy Hash: 6cb525eafdbe074bd81a2014da1d4c21dedde1901dc51fafceb222652d456062
Instruction Fuzzy Hash: BD51D033A08A8185E710DF25D480AAD7360FF95BA8B055235EF9D93BA8DF3AD546C344

Function 00007FF6E9E0227C Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

GetCommandLineW.KERNEL32(?,?,?,00007FF6E9E02356), ref: 00007FF6E9E02295
CommandLineToArgvW.SHELL32(?,?,?,00007FF6E9E02356), ref: 00007FF6E9E022A5
malloc.MSVCRT ref: 00007FF6E9E022B9
malloc.MSVCRT ref: 00007FF6E9E022ED
wcstombs.MSVCRT(?,?,?,00007FF6E9E02356), ref: 00007FF6E9E0230E

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CommandLinemalloc$Argvwcstombs
String ID:
API String ID: 175250670-0
Opcode ID: 636ccd5f01464c353baf4956920b5dbdc711e6a3ba087fd24f89c0110948d378
Instruction ID: a9a5516ba3d5f0afc57e0e312559d16ed2dd0c71a9ed7e5bdc85294d274354fa
Opcode Fuzzy Hash: 636ccd5f01464c353baf4956920b5dbdc711e6a3ba087fd24f89c0110948d378
Instruction Fuzzy Hash: 4E112E72A08A86C5E7008F12E98426873A5FF58FD0B055232CBDED37A5DE7DD595C309

Function 00007FF6E9E0CD74 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 176COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

time.MSVCRT ref: 00007FF6E9E0CDBA
free.MSVCRT ref: 00007FF6E9E0CFA8
free.MSVCRT ref: 00007FF6E9E0CFB7

Strings

tor_socket::send_net_info(), xrefs: 00007FF6E9E0CD9D

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$CurrentLocalThreadTime_cwprintf_s_ltime
String ID: tor_socket::send_net_info()
API String ID: 1526019956-2499986577
Opcode ID: da2bab47c4ff57e54c41f07cd9fa0fcd3daba95c8203398aadb6085517c48727
Instruction ID: 2b7f63c6a7473345da3c0f55e63b62245e246f416a8a100853cc368fa7fab22f
Opcode Fuzzy Hash: da2bab47c4ff57e54c41f07cd9fa0fcd3daba95c8203398aadb6085517c48727
Instruction Fuzzy Hash: E7715A73B04A818AEB00DF75C4842EC77B6FB45BA8B400265DF6DA7B99EE39E105C345

Function 00007FF6E9E10560 Relevance: 6.5, APIs: 5, Instructions: 268COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 3036a327e3747fb4143e3568027a349821536520fa70720feae89e1d29fe0cef
Instruction ID: e0d11a352b5493379bfeb56d2cd99e52c99e246a66262ada3cc5df01ecedb9e5
Opcode Fuzzy Hash: 3036a327e3747fb4143e3568027a349821536520fa70720feae89e1d29fe0cef
Instruction Fuzzy Hash: 74D11873608B8589EB208F65E4802EDB3A0FF89798F104226EB8D97B58EF39D544C745

Function 00007FF6E9E084D0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetTickCount.KERNEL32 ref: 00007FF6E9E084ED

Part of subcall function 00007FF6E9E0D094: free.MSVCRT ref: 00007FF6E9E0D28A

GetTickCount.KERNEL32 ref: 00007FF6E9E0850D

Strings

timeout, xrefs: 00007FF6E9E0851D

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CountTick$free
String ID: timeout
API String ID: 3830800293-743945614
Opcode ID: 1111ac1303a8cb7038f07f92f1262d63f022e769b0cdb5830cbc3d127fe02e19
Instruction ID: 8afc9dc1a2f70f932eaeba4c442e5fa92b20a40d5a650f609e1b489f33e4a0c8
Opcode Fuzzy Hash: 1111ac1303a8cb7038f07f92f1262d63f022e769b0cdb5830cbc3d127fe02e19
Instruction Fuzzy Hash: DD019233A08A4281EB50CF26A4806B963A1EF44794F146035EBDDD369AEE7FD445CB4A

Function 00007FF6E9E05040 Relevance: 5.2, APIs: 4, Instructions: 154COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6E9E0508F
memmove.MSVCRT ref: 00007FF6E9E050C8
memmove.MSVCRT ref: 00007FF6E9E050E2
memmove.MSVCRT ref: 00007FF6E9E05243

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 29eed408886a033e9e71fb567107c333dcdf83abf3fb1affb8e8a88f50fd84bf
Instruction ID: 7a4971808267868ea05ed89dd134499641a3586e8d5d93ce649ce9bfbb304df6
Opcode Fuzzy Hash: 29eed408886a033e9e71fb567107c333dcdf83abf3fb1affb8e8a88f50fd84bf
Instruction Fuzzy Hash: 2D717923B05B8596EB58CF66C9847AC73A4FF05B94F148236CBAC53784EF39E4A58305

Function 00007FF6E9E0F208 Relevance: 5.1, APIs: 4, Instructions: 138COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E0F42C: malloc.MSVCRT ref: 00007FF6E9E0F483
Part of subcall function 00007FF6E9E0F42C: memmove.MSVCRT ref: 00007FF6E9E0F4B2
Part of subcall function 00007FF6E9E0F42C: CryptImportKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F4D9
Part of subcall function 00007FF6E9E0F42C: free.MSVCRT ref: 00007FF6E9E0F4E2
Part of subcall function 00007FF6E9E0F42C: CryptCreateHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F504
Part of subcall function 00007FF6E9E0F42C: memset.MSVCRT ref: 00007FF6E9E0F51F
Part of subcall function 00007FF6E9E0F42C: CryptSetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F532
Part of subcall function 00007FF6E9E0F42C: CryptHashData.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F560
Part of subcall function 00007FF6E9E0F42C: CryptGetHashParam.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F58B
Part of subcall function 00007FF6E9E0F42C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F5AA

Part of subcall function 00007FF6E9E08E54: memmove.MSVCRT ref: 00007FF6E9E08EAB

Part of subcall function 00007FF6E9E0F42C: CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F5BD
Part of subcall function 00007FF6E9E0F42C: CryptDestroyHash.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,00007FF6E9E0EFE4), ref: 00007FF6E9E0F5D0

free.MSVCRT ref: 00007FF6E9E0F37E
free.MSVCRT ref: 00007FF6E9E0F3C5
free.MSVCRT ref: 00007FF6E9E0F3E0
free.MSVCRT ref: 00007FF6E9E0F3FB

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: Crypt$Hash$free$Destroy$Parammemmove$CreateDataImportmallocmemset
String ID:
API String ID: 3037252780-0
Opcode ID: 729bb2db9c86719bc85c4b397aaf471796dba222bc50e06f41bbed20d8440fd4
Instruction ID: 9de61164ded5d8cfd46fd0dcffbae5711f7ea9e053ef174689cd9c0fdd008b4d
Opcode Fuzzy Hash: 729bb2db9c86719bc85c4b397aaf471796dba222bc50e06f41bbed20d8440fd4
Instruction Fuzzy Hash: FF516F33A18BC586E7018F69E8801AEB7B4FB98B68F145225EFD853B58DF38D585C740

Function 00007FF6E9E11A6C Relevance: 4.8, APIs: 1, Strings: 2, Instructions: 257COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6E9E11E63

Part of subcall function 00007FF6E9E01BAC: free.MSVCRT ref: 00007FF6E9E01BC2

Strings

Trying to build new circuit..., xrefs: 00007FF6E9E11E3E
cached-consensus, xrefs: 00007FF6E9E11A7E

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free
String ID: Trying to build new circuit...$cached-consensus
API String ID: 1294909896-1511346022
Opcode ID: 5daf116d1134fae6aaf36b835a99305536a70d5b2926325f728bd5962636fe09
Instruction ID: ca2705c5e593a62ca0c7268c8eb14931294503f31a0d9bffc11bbc0e814af5e3
Opcode Fuzzy Hash: 5daf116d1134fae6aaf36b835a99305536a70d5b2926325f728bd5962636fe09
Instruction Fuzzy Hash: CDC14733619B8585DA60CF55E4843AEB3A4FF89B80F504236DACD83758EF39C999CB05

Function 00007FF6E9E0D094 Relevance: 4.7, APIs: 1, Strings: 2, Instructions: 155COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E0CA50: memset.MSVCRT ref: 00007FF6E9E0CAE0

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

free.MSVCRT ref: 00007FF6E9E0D28A

Strings

tor_socket::recv_cell_iteration() !! received cell for non-existent circuit-id: %X, xrefs: 00007FF6E9E0D22C
tor_socket::recv_cell_iteration() !! received invalid cell, closing stream, xrefs: 00007FF6E9E0D0D3

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CurrentLocalThreadTime_cwprintf_s_lfreememset
String ID: tor_socket::recv_cell_iteration() !! received cell for non-existent circuit-id: %X$tor_socket::recv_cell_iteration() !! received invalid cell, closing stream
API String ID: 1383866297-1620486077
Opcode ID: 212083ddafc71513217ea83c0c1db7b026ff50cfb764f7c39ac221cad83ee3f3
Instruction ID: 882fb15f4753870f9509f5e7d5ce78f4d2387226c1838b768e2a1e723a42476c
Opcode Fuzzy Hash: 212083ddafc71513217ea83c0c1db7b026ff50cfb764f7c39ac221cad83ee3f3
Instruction Fuzzy Hash: 16614A77B05B418AEB108F65C4803AC33A1FF48B98B188236DB9D97794EE3DD942C745

Function 00007FF6E9E06B08 Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 119COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E02B6C: memmove.MSVCRT ref: 00007FF6E9E02C28
Part of subcall function 00007FF6E9E02B6C: memmove.MSVCRT ref: 00007FF6E9E02C5A
Part of subcall function 00007FF6E9E02B6C: memmove.MSVCRT ref: 00007FF6E9E02CB7

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

Part of subcall function 00007FF6E9E0B17C: free.MSVCRT ref: 00007FF6E9E0B1F3
Part of subcall function 00007FF6E9E0B17C: free.MSVCRT ref: 00007FF6E9E0B1FE
Part of subcall function 00007FF6E9E0B17C: free.MSVCRT ref: 00007FF6E9E0B209
Part of subcall function 00007FF6E9E0B17C: memcmp.MSVCRT ref: 00007FF6E9E0B25C
Part of subcall function 00007FF6E9E0B17C: free.MSVCRT ref: 00007FF6E9E0B2C4
Part of subcall function 00007FF6E9E0B17C: free.MSVCRT ref: 00007FF6E9E0B2DB

free.MSVCRT ref: 00007FF6E9E06C9A
free.MSVCRT ref: 00007FF6E9E06CA5

Strings

hidden_service() [%s.onion], xrefs: 00007FF6E9E06BCE

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$memmove$CurrentLocalThreadTime_cwprintf_s_lmemcmp
String ID: hidden_service() [%s.onion]
API String ID: 1173836548-1866994827
Opcode ID: 599c7e0214bbc0b5320a4e2fd9d730736f4f4e0b911718b840b64e68018f555f
Instruction ID: da238ad76234666b64ad3521df7dbe6941b404ceac31e2065737fcd6db08bdb3
Opcode Fuzzy Hash: 599c7e0214bbc0b5320a4e2fd9d730736f4f4e0b911718b840b64e68018f555f
Instruction Fuzzy Hash: 0C518B73A18B8186E7008F65E8803ADB370FB89B94F109226EBCD57699EF7DD594C700

Function 00007FF6E9E0FC4C Relevance: 4.6, APIs: 2, Strings: 1, Instructions: 118COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6E9E0FCED
free.MSVCRT ref: 00007FF6E9E0FD71

Strings

gfffffff, xrefs: 00007FF6E9E0FC7E

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: freemalloc
String ID: gfffffff
API String ID: 3061335427-1523873471
Opcode ID: de7df1c6bc8f2e50def95bc419466b8504cc1a9bd2169939be60953d27a7661d
Instruction ID: 9224a264ba418ebeec968348db1424685678191c05db05b11c7af264db808f63
Opcode Fuzzy Hash: de7df1c6bc8f2e50def95bc419466b8504cc1a9bd2169939be60953d27a7661d
Instruction Fuzzy Hash: FC51F4B7A05B4886DB08CF52E8803A873A4F758BD8F148A26DA9D87754DF38D5E5C381

Function 00007FF6E9E0AF44 Relevance: 3.8, APIs: 3, Instructions: 38COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6E9E0AF82
memmove.MSVCRT(?,?,?,00007FF6E9E0ACBA), ref: 00007FF6E9E0AF9D
free.MSVCRT ref: 00007FF6E9E0AFA6

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: freemallocmemmove
String ID:
API String ID: 2537350866-0
Opcode ID: c388a345a0abba1a013b7b8d6fc45ef0d0b0ed69197774d95903d27a24bc20b6
Instruction ID: 8bb9f51154e45290c4edab1297705e781d639f09613c6224693630f5607700e2
Opcode Fuzzy Hash: c388a345a0abba1a013b7b8d6fc45ef0d0b0ed69197774d95903d27a24bc20b6
Instruction Fuzzy Hash: 22016166A14F84C5CB008F26E44009D7764FB48FE47144636EBAD17BA9CF38D596C380

Function 00007FF6E9E05F34 Relevance: 3.0, APIs: 2, Instructions: 30networkCOMMON

Download Yara Rule

APIs

WSAStartup.WS2_32 ref: 00007FF6E9E05F96
atexit.MSVCRT ref: 00007FF6E9E05FA3

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: Startupatexit
String ID:
API String ID: 549365519-0
Opcode ID: 56e459ee09a98d017ffa9f395f0ad20b2f941f419292dfe2e3568e4c1c9cedf3
Instruction ID: e38c089b6366a174a433f17fa3da3fc95474e532d1b699d38df39cc3a6cc32f5
Opcode Fuzzy Hash: 56e459ee09a98d017ffa9f395f0ad20b2f941f419292dfe2e3568e4c1c9cedf3
Instruction Fuzzy Hash: AE01E532519B0291DB108F24E8841697368FF49B78B514335EABD833E4EF3DD59AC349

Function 00007FF6E9E0D83C Relevance: 2.6, APIs: 2, Instructions: 65COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6E9E0D8A7
free.MSVCRT ref: 00007FF6E9E0D90A

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: freememmove
String ID:
API String ID: 2988784210-0
Opcode ID: bc1352369a6a27c9bd2d8de83e1c68650c206812d315fc743bc07604c3c7958b
Instruction ID: 977716b1f51f870499935a8de1d2b153d8e7b75baa32354f90ed5c6a7d102ef5
Opcode Fuzzy Hash: bc1352369a6a27c9bd2d8de83e1c68650c206812d315fc743bc07604c3c7958b
Instruction Fuzzy Hash: 91312476B10B10A6EB04CF66E9801AC3374FB48B94B189225DF9DA3B98DF35E5B1C340

Function 00007FF6E9E020F8 Relevance: 2.6, APIs: 2, Instructions: 62COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6E9E0213E
free.MSVCRT ref: 00007FF6E9E021B5

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: f5f5b6a4d2f0d5135d721687da0bf41553a4098c9452ff204767c330f2461de7
Instruction ID: f00ea078087d2ef24f0cd8990f24ecb90ebbbb3e91f95260eecc08f394f674dc
Opcode Fuzzy Hash: f5f5b6a4d2f0d5135d721687da0bf41553a4098c9452ff204767c330f2461de7
Instruction Fuzzy Hash: 5E21F476A01B4486DB048F56E884358B3A4F758FE4F24462ADBAC47394DF38C9A6C380

Function 00007FF6E9E0B0A8 Relevance: 2.6, APIs: 2, Instructions: 60COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6E9E0B0F5

Part of subcall function 00007FF6E9E099F4: CryptHashData.ADVAPI32 ref: 00007FF6E9E09B76

free.MSVCRT ref: 00007FF6E9E0B163

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDataHashfreemalloc
String ID:
API String ID: 4030236771-0
Opcode ID: eda6b35b4f43785f497b5a90bc3a6fbc4847cdbaccb83d9dde591becca08a395
Instruction ID: 5f3bf77f18fbe1735da93259a1f02e325556f661b4cbbe4bc10aacc0cea1f8c6
Opcode Fuzzy Hash: eda6b35b4f43785f497b5a90bc3a6fbc4847cdbaccb83d9dde591becca08a395
Instruction Fuzzy Hash: 58212A73B04B508AEB00CFA5E8901AC3370FB48B58B544629EFAEA3798EF34D591C340

Function 00007FF6E9E0C15C Relevance: 2.5, APIs: 2, Instructions: 49COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF6E9E0C183
LeaveCriticalSection.KERNEL32 ref: 00007FF6E9E0C204

Part of subcall function 00007FF6E9E01BAC: free.MSVCRT ref: 00007FF6E9E01BC2

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CriticalSection$EnterLeavefree
String ID:
API String ID: 4020351045-0
Opcode ID: ff2a8dc36760ae7b31fef743547374cb4594d53cb42e258d239bcb0df973ac2d
Instruction ID: 19e862958a77164f5ce01bbadf049ccf77b58424e36335484f41e8b2d767174f
Opcode Fuzzy Hash: ff2a8dc36760ae7b31fef743547374cb4594d53cb42e258d239bcb0df973ac2d
Instruction Fuzzy Hash: 21115E63B24B6488FB10CFB4E8812AC2374FF59B68F145225DF9D66A99EF39C084C304

Function 00007FF6E9E02074 Relevance: 2.5, APIs: 2, Instructions: 34COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00007FF6E9E020A6
free.MSVCRT ref: 00007FF6E9E020C6

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: b7289756deaf2281126f785b6150de9230cf809aabd077c69b50a9b237b63b39
Instruction ID: a12ed244080d798daa6703267e55428154ef1eb48d778653e4c4876a02a83bc8
Opcode Fuzzy Hash: b7289756deaf2281126f785b6150de9230cf809aabd077c69b50a9b237b63b39
Instruction Fuzzy Hash: D501E27A615B8586CB188F26F48016AB364FB48FC4B248036DB9E47B29DF39E596C340

Function 00007FF6E9E04B20 Relevance: 1.6, APIs: 1, Instructions: 81fileCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E01BAC: free.MSVCRT ref: 00007FF6E9E01BC2

CreateFileA.KERNELBASE ref: 00007FF6E9E04C27

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CreateFilefree
String ID:
API String ID: 1298414175-0
Opcode ID: 967cc07b0d1bba1ad99a6294e64c340a394ccec1fcd66ac749ac13115b54e733
Instruction ID: 95a36116265658c980aa12e3aa7db2ea8d3001181fba8c34db2e35af1e4877d3
Opcode Fuzzy Hash: 967cc07b0d1bba1ad99a6294e64c340a394ccec1fcd66ac749ac13115b54e733
Instruction Fuzzy Hash: EF319D73A14B4087D710CF25E58439C73A4FB99BA8F258225DBAC87B94EF79D8A4C740

Function 00007FF6E9E06230 Relevance: 1.5, APIs: 1, Instructions: 17networkCOMMON

Download Yara Rule

APIs

send.WS2_32 ref: 00007FF6E9E06249

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: 3de1ff520bc11ac6883d350d74be1a90305dc12661e06926623bad6a559e0201
Instruction ID: 63ab5790daa68bc63256b5162574ea4792f667924e0275a76a327306dde439eb
Opcode Fuzzy Hash: 3de1ff520bc11ac6883d350d74be1a90305dc12661e06926623bad6a559e0201
Instruction Fuzzy Hash: D4D05E12E14902C1EF748BB6A4D47381298AF9EFB9F141330CB7E996D1FF2E91929205

Function 00007FF6E9E0603C Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

closesocket.WS2_32 ref: 00007FF6E9E06049

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: closesocket
String ID:
API String ID: 2781271927-0
Opcode ID: 64c90f885a31d48d57d6b25ffc1b1352abae0e759f8bbbde2d0c86ebcd09df8c
Instruction ID: ca0b1fdd748a6d999d7f5c56d808b36d28c4f424fb621ec56317b6946e1b13aa
Opcode Fuzzy Hash: 64c90f885a31d48d57d6b25ffc1b1352abae0e759f8bbbde2d0c86ebcd09df8c
Instruction Fuzzy Hash: B2C08C62B2090482EB594B62A8850282224EF58F30B182320CEBD892E19F14C1E68300

Function 00007FF6E9E04D7C Relevance: 1.5, APIs: 1, Instructions: 8fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE ref: 00007FF6E9E04D8F

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: d5a4c1bd308a5df499a1d71afb31962f28aa0264ff091325faeae8dc997d8657
Instruction ID: 03cbabff8e877a054a50fdcc642b51196c5f8e1af5a90286aecbabd9489346b5
Opcode Fuzzy Hash: d5a4c1bd308a5df499a1d71afb31962f28aa0264ff091325faeae8dc997d8657
Instruction Fuzzy Hash: 2CC00266A19984C3D610DF15E845759B370FB99B18FA00111EB8D82625CF3EDE5ACA05

Function 00007FF6E9E05DA0 Relevance: 1.4, APIs: 1, Instructions: 101COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6E9E05E1F

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 47b68d978419b3d1d0bf07cdc05175ec34861cb67b8432b19bd7770028bf244d
Instruction ID: fee839e2ae12bf969ab3a76eb9391bf56f84ae83012376fd95076bff64b48d09
Opcode Fuzzy Hash: 47b68d978419b3d1d0bf07cdc05175ec34861cb67b8432b19bd7770028bf244d
Instruction Fuzzy Hash: 74413473B10B819AE704CF66D8407AC77A1FB48BA8F104229DF6863B88EF75E565C744

Function 00007FF6E9E0541C Relevance: 1.3, APIs: 1, Instructions: 64COMMON

Download Yara Rule

APIs

memmove.MSVCRT(?,?,?,00007FF6E9E118E0), ref: 00007FF6E9E054CA

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 5f489463252743d5f33400c16c58bccaa1b73653c4a671fa15be28a9c505617a
Instruction ID: 4d2029027f683acb7a900428049cc6f5b67b1ce412da521f8af53ebf482b2eaa
Opcode Fuzzy Hash: 5f489463252743d5f33400c16c58bccaa1b73653c4a671fa15be28a9c505617a
Instruction Fuzzy Hash: 5121B773B1D64682EBA08F26D4807BD23A1FF44B99F248235DF8E87398DD39D5408319

Function 00007FF6E9E01D28 Relevance: 1.3, APIs: 1, Instructions: 41COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6E9E01D92

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 1400a4375b15c7b6be5c1a2fa7b3db035b68f5a1f72ed520b6b47053a515f4ab
Instruction ID: 98d65131a29e337c44e1e4fcb473bf88147996b38a67d1ddb3ac29135920e825
Opcode Fuzzy Hash: 1400a4375b15c7b6be5c1a2fa7b3db035b68f5a1f72ed520b6b47053a515f4ab
Instruction Fuzzy Hash: 23016122718AC185DB108F16E5803AAB720EF85BE8F584231EBAD4BB99DF2DD041C740

Function 00007FF6E9E01FF4 Relevance: 1.3, APIs: 1, Instructions: 37COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6E9E02052

Part of subcall function 00007FF6E9E02074: malloc.MSVCRT ref: 00007FF6E9E020A6
Part of subcall function 00007FF6E9E02074: free.MSVCRT ref: 00007FF6E9E020C6

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: freemallocmemset
String ID:
API String ID: 3809226132-0
Opcode ID: a840bc7aaf571b9cae7747feef645975e989ff6794cab3c7b45526e37f9bf6a6
Instruction ID: 9e46cac79ab094bef0b23f09962ad3533ca63578e5127d89668622b258c7110f
Opcode Fuzzy Hash: a840bc7aaf571b9cae7747feef645975e989ff6794cab3c7b45526e37f9bf6a6
Instruction Fuzzy Hash: 0C018FA2B08BC082DB04CFAAE58406DA362EB49FC47048035DF9C4B71DDE28C491C340

Function 00007FF6E9E04EE8 Relevance: 1.3, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E04B20: CreateFileA.KERNELBASE ref: 00007FF6E9E04C27

CloseHandle.KERNELBASE ref: 00007FF6E9E04F49

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CloseCreateFileHandle
String ID:
API String ID: 3498533004-0
Opcode ID: 9f45e04212de54cf2a94c7a1aa0cd980597b2fb5a3e44d3ccd437fe9ce84d955
Instruction ID: ad18529ceb241c3d0b239b64673c5b0c4f676811d2b990da4bf44f136fb5e784
Opcode Fuzzy Hash: 9f45e04212de54cf2a94c7a1aa0cd980597b2fb5a3e44d3ccd437fe9ce84d955
Instruction Fuzzy Hash: B4016963A04F8591DB00CB65E4843ACA364FB86B74F400326DBBC827F5EF68C989C700

Function 00007FF6E9E01ED0 Relevance: 1.3, APIs: 1, Instructions: 26COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6E9E01F12

Part of subcall function 00007FF6E9E01BAC: free.MSVCRT ref: 00007FF6E9E01BC2

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 5f7ed36a1e4d0079af8b67e5f1414300025ba24bd381152af37cc2b6fd1143ac
Instruction ID: cebbf7da66bb01cc698d56ec0ff60ddd7d334e257d7fdbfdbc9ab69fc20bf780
Opcode Fuzzy Hash: 5f7ed36a1e4d0079af8b67e5f1414300025ba24bd381152af37cc2b6fd1143ac
Instruction Fuzzy Hash: 03F05422A4868082DA104F06F444159A321FF49FB4B280231EFA807BD5CF2DD052C704

Function 00007FF6E9E06E8C Relevance: 1.3, APIs: 1, Instructions: 26COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E0C9F4: free.MSVCRT ref: 00007FF6E9E0CA41

free.MSVCRT ref: 00007FF6E9E06ED2

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 8ca048768c4de5b1461598578d39b50963595d1204a609cf1b760563c82d2b23
Instruction ID: 27fa14d3e803cf9f2bf00c42e5c155ef2e3f08f0bb9e0a5014c4d45f288fb5c0
Opcode Fuzzy Hash: 8ca048768c4de5b1461598578d39b50963595d1204a609cf1b760563c82d2b23
Instruction Fuzzy Hash: A3F0BE63A0268581EB00DF25C48516D6320AFCAF74B248335DBBD533F5EE28D886C704

Function 00007FF6E9E0C9F4 Relevance: 1.3, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6E9E0CA41

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: c7bef888a7c1d1ceef3cae74e8f9250cb1b6c5f686ede0b0dac61642ad62a27a
Instruction ID: aca5d37d64ed1672bc001e65108c39efceaaabd8de97f30fb31acc4de6c267b9
Opcode Fuzzy Hash: c7bef888a7c1d1ceef3cae74e8f9250cb1b6c5f686ede0b0dac61642ad62a27a
Instruction Fuzzy Hash: B8F08263524A8282CB209F25E04156A6720FF89FE4B001321EFEE577D9DF3DC105C604

Function 00007FF6E9E01CD4 Relevance: 1.3, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6E9E01D10

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: cc54afcfa86a0e98bdcfccdc3784b9090a28be23aa4527b145c0e61bc4e052e8
Instruction ID: e033fea4b309c5cd8b6f1d4cfb933536c4bd86c3d54f60168ab2c9d08741261e
Opcode Fuzzy Hash: cc54afcfa86a0e98bdcfccdc3784b9090a28be23aa4527b145c0e61bc4e052e8
Instruction Fuzzy Hash: 5AE0A052E086C480EA044F13B580359A610AF46FF0E08A330EFBD5BBC9DE6CD4918704

Function 00007FF6E9E058BC Relevance: 1.3, APIs: 1, Instructions: 18COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6E9E058E3

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 3359a68eec4475fca628123eab981bd4f2c99cb6b6e6948749857cb2f8952175
Instruction ID: c58863c70aadbc0aea40029360d6198163f70a714479664a2c583bc76d17e151
Opcode Fuzzy Hash: 3359a68eec4475fca628123eab981bd4f2c99cb6b6e6948749857cb2f8952175
Instruction Fuzzy Hash: 9AD08C22A0878142D7205B1AB645229A260BF8ABB0F680330DBF8427EACF2EC4418609

Function 00007FF6E9E01BAC Relevance: 1.3, APIs: 1, Instructions: 8COMMONLIBRARYCODE

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6E9E01BC2

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 94e73ce95805a66b71ef28f659bf7d04456f3945975dd2b7a1630861a4a6831a
Instruction ID: 29d50d36fb412a01f8f6c4453f7f1758487ed5426720053600846b1bda5422b3
Opcode Fuzzy Hash: 94e73ce95805a66b71ef28f659bf7d04456f3945975dd2b7a1630861a4a6831a
Instruction Fuzzy Hash: F8C00222914AC581C620AB25E8490196724FB96B75BA08324DAFD456F5CF2DC55BCB04

Non-executed Functions

Function 00007FF6E9E0793C Relevance: 19.8, APIs: 4, Strings: 9, Instructions: 333COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

Part of subcall function 00007FF6E9E08ECC: CryptHashData.ADVAPI32 ref: 00007FF6E9E08F19
Part of subcall function 00007FF6E9E08ECC: CryptDestroyHash.ADVAPI32 ref: 00007FF6E9E08F3E

free.MSVCRT ref: 00007FF6E9E07D8A
free.MSVCRT ref: 00007FF6E9E07D95
free.MSVCRT ref: 00007FF6E9E07DAC
free.MSVCRT ref: 00007FF6E9E07DB7

Strings

circuit::rendezvous_introduce() [or: %s, state: introducing], xrefs: 00007FF6E9E079CB
circuit::rendezvous_introduce() [or: %s, state: completed], xrefs: 00007FF6E9E07E19
circuit::rendezvous_introduce() rendezvous circuit extend node isn't null, xrefs: 00007FF6E9E07A92
circuit::rendezvous_introduce() [or: %s, is_rendezvous_completed() == false], xrefs: 00007FF6E9E07E2B
circuit::rendezvous_introduce() [or: %s, state: completing], xrefs: 00007FF6E9E079EC
introduction_point is null [circuit: %X], xrefs: 00007FF6E9E07E58
introducee is null [circuit: %X], xrefs: 00007FF6E9E07E4B
circuit::rendezvous_introduce() [or: %s, state: introduced], xrefs: 00007FF6E9E07DE1
circuit::rendezvous_introduce() [or: %s, is_rendezvous_introduced() == false], xrefs: 00007FF6E9E07E3E

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$CryptHash$CurrentDataDestroyLocalThreadTime_cwprintf_s_l
String ID: circuit::rendezvous_introduce() [or: %s, is_rendezvous_completed() == false]$circuit::rendezvous_introduce() [or: %s, is_rendezvous_introduced() == false]$circuit::rendezvous_introduce() [or: %s, state: completed]$circuit::rendezvous_introduce() [or: %s, state: completing]$circuit::rendezvous_introduce() [or: %s, state: introduced]$circuit::rendezvous_introduce() [or: %s, state: introducing]$circuit::rendezvous_introduce() rendezvous circuit extend node isn't null$introducee is null [circuit: %X]$introduction_point is null [circuit: %X]
API String ID: 3705592166-1875301337
Opcode ID: 3c1a0aa748772419769d899b1d21e492d6fcaa49d9f084cc94068e4eac399a8a
Instruction ID: 35c68f9b7be4c389674279dda76f1c6e203a697830e6de33a8fd29b018ccb138
Opcode Fuzzy Hash: 3c1a0aa748772419769d899b1d21e492d6fcaa49d9f084cc94068e4eac399a8a
Instruction Fuzzy Hash: 77F1AF63A18B8582DB00CF65E8802ADB7A0FF85B94F504232EB9D93799EF7ED545C704

Function 00007FF6E9E0E958 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 143COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6E9E0E9CF
memmove.MSVCRT ref: 00007FF6E9E0EA95
memmove.MSVCRT ref: 00007FF6E9E0EACD
memmove.MSVCRT ref: 00007FF6E9E0EB08
BCryptImportKeyPair.BCRYPT ref: 00007FF6E9E0EB3C
BCryptExportKey.BCRYPT ref: 00007FF6E9E0EB6E

Strings

DHPRIVATEBLOB, xrefs: 00007FF6E9E0EB2C, 00007FF6E9E0EB62
DHPV, xrefs: 00007FF6E9E0E9AF

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memmove$Crypt$ExportImportPairmemset
String ID: DHPRIVATEBLOB$DHPV
API String ID: 2581258595-3323250641
Opcode ID: f80fd9cabac184f76c0a6aa1a9b40fe8b7bcfee4bba84a21a0249219f670dcda
Instruction ID: e020100942a52f9db08a5c580af859939531efbd9ff38b6897bab2a6b364d187
Opcode Fuzzy Hash: f80fd9cabac184f76c0a6aa1a9b40fe8b7bcfee4bba84a21a0249219f670dcda
Instruction Fuzzy Hash: 02518222A24B8486DB11CF29E5447E87360FF99B88F559331DF9C16322EF39E299C304

Function 00007FF6E9E0E744 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 132COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6E9E0E7BD
memmove.MSVCRT ref: 00007FF6E9E0E87C
memmove.MSVCRT ref: 00007FF6E9E0E8B4
memmove.MSVCRT ref: 00007FF6E9E0E8EF
BCryptImportKeyPair.BCRYPT ref: 00007FF6E9E0E923

Strings

DHPB, xrefs: 00007FF6E9E0E79D
DHPUBLICBLOB, xrefs: 00007FF6E9E0E913

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memmove$CryptImportPairmemset
String ID: DHPB$DHPUBLICBLOB
API String ID: 1384487252-1103359662
Opcode ID: ba63a1e9017199b943767076d9444dabd0a7cd781767b20f0d192410dcd481e4
Instruction ID: 361271018f413465679182d50ef12b2a96f9fb72ea38b3643614d70b9dfd4b93
Opcode Fuzzy Hash: ba63a1e9017199b943767076d9444dabd0a7cd781767b20f0d192410dcd481e4
Instruction Fuzzy Hash: 85517322A24B8492DB01CF29D9157E87360FB99B88F559321DF9C16312EF39E2D9C304

Function 00007FF6E9E0D990 Relevance: 12.2, APIs: 8, Instructions: 174encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,00000000,?,00000001,00007FF6E9E125A8), ref: 00007FF6E9E0DA27
CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,00000000,?,00000001,00007FF6E9E125A8), ref: 00007FF6E9E0DAFE
CryptDestroyKey.ADVAPI32(?,?,?,?,?,?,?,?,?,00000000,?,00000001,00007FF6E9E125A8), ref: 00007FF6E9E0DB74

Part of subcall function 00007FF6E9E0DD8C: CryptDecodeObject.CRYPT32 ref: 00007FF6E9E0DE15
Part of subcall function 00007FF6E9E0DD8C: CryptImportKey.ADVAPI32 ref: 00007FF6E9E0DE44

Part of subcall function 00007FF6E9E0DE60: memmove.MSVCRT ref: 00007FF6E9E0DEBE
Part of subcall function 00007FF6E9E0DE60: CryptEncrypt.ADVAPI32 ref: 00007FF6E9E0DEF5

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: Crypt$Destroy$DecodeEncryptImportObjectmemmove
String ID:
API String ID: 1580205057-0
Opcode ID: 04aa28e4c7932ac9f0d7eb10991bd8f422f58e931ed675ef883ffe44aab7b5ba
Instruction ID: d5dc4c7ec946a613aa7902e7a8951c70ecb0e5019b1bb1ebccf264ae41a967f9
Opcode Fuzzy Hash: 04aa28e4c7932ac9f0d7eb10991bd8f422f58e931ed675ef883ffe44aab7b5ba
Instruction Fuzzy Hash: 98912A33A28B8586EB408F65E4807ADB374FB89B94F105225EBCD53B19EF78D594C740

Function 00007FF6E9E09C84 Relevance: 10.7, APIs: 7, Instructions: 178encryptionCOMMON

Download Yara Rule

APIs

CryptHashData.ADVAPI32 ref: 00007FF6E9E09DE3
CryptDuplicateHash.ADVAPI32 ref: 00007FF6E9E09DFE
CryptDestroyHash.ADVAPI32 ref: 00007FF6E9E09E24
free.MSVCRT ref: 00007FF6E9E09E3F
memmove.MSVCRT ref: 00007FF6E9E09E8D
free.MSVCRT ref: 00007FF6E9E09EEA
free.MSVCRT ref: 00007FF6E9E09EF5

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptHashfree$DataDestroyDuplicatememmove
String ID:
API String ID: 2859014979-0
Opcode ID: 72e6eb8ddbe3ad292cbaa642e28bd9d09380eb957dd268a61e83118deb2dcac6
Instruction ID: d68bf5dd1866f34c04d88628f1089e5162bfffff250c7796feb4482a785e4c2b
Opcode Fuzzy Hash: 72e6eb8ddbe3ad292cbaa642e28bd9d09380eb957dd268a61e83118deb2dcac6
Instruction Fuzzy Hash: 2A812477B05B418AEB00CFA5D4802EC7375FF45B98B004266DF9DA7A99EE39E50AC344

Function 00007FF6E9E158AC Relevance: 10.5, APIs: 7, Instructions: 47COMMON

Download Yara Rule

APIs

BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6E9E158C4
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6E9E158D8
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6E9E158EC
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6E9E15900
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6E9E15914
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6E9E15928
BCryptCloseAlgorithmProvider.BCRYPT ref: 00007FF6E9E15944

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: AlgorithmCloseCryptProvider
String ID:
API String ID: 3378198380-0
Opcode ID: 0465b0cbe872db1f1d628d5d248310a51d8e777f285f354e42eb045fc691be28
Instruction ID: e73b1c82e1788db009b49d7c6f20fe99af60806cb2a463b5383abac16e86460e
Opcode Fuzzy Hash: 0465b0cbe872db1f1d628d5d248310a51d8e777f285f354e42eb045fc691be28
Instruction Fuzzy Hash: C911CB2BF0A60285FF58CF23ACD47792351AFC9B55F188835CA8E82555DE3EE509D20A

Function 00007FF6E9E0E57C Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 84COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E0E744: memset.MSVCRT ref: 00007FF6E9E0E7BD
Part of subcall function 00007FF6E9E0E744: memmove.MSVCRT ref: 00007FF6E9E0E87C
Part of subcall function 00007FF6E9E0E744: memmove.MSVCRT ref: 00007FF6E9E0E8B4

BCryptSecretAgreement.BCRYPT ref: 00007FF6E9E0E617
BCryptDeriveKey.BCRYPT ref: 00007FF6E9E0E66B
BCryptDestroySecret.BCRYPT ref: 00007FF6E9E0E678
BCryptDestroyKey.BCRYPT ref: 00007FF6E9E0E6CC

Strings

TRUNCATE, xrefs: 00007FF6E9E0E65D

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: Crypt$DestroySecretmemmove$AgreementDerivememset
String ID: TRUNCATE
API String ID: 3314240396-2602342604
Opcode ID: 65d5ba46f674aa20e22a304678ab28c191fd29356ca0cd563123eeaec7f3c646
Instruction ID: 0272f9f78a64450aeb4ae0b07f33299c3ddbc6d0afa2398742591849203b9cfb
Opcode Fuzzy Hash: 65d5ba46f674aa20e22a304678ab28c191fd29356ca0cd563123eeaec7f3c646
Instruction Fuzzy Hash: DE414D73918BC08AD7108F64E8843AAB770FB89768F144325EBEC56B98DF79D148CB40

Function 00007FF6E9E09678 Relevance: 7.6, APIs: 5, Instructions: 53encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyHash.ADVAPI32 ref: 00007FF6E9E096AF
CryptDestroyHash.ADVAPI32 ref: 00007FF6E9E096CA
CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E096FA
CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E0971C
free.MSVCRT ref: 00007FF6E9E0972B

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroy$Hash$free
String ID:
API String ID: 3361909387-0
Opcode ID: 8056463906fa680d0ede20bf7d5d200b464088edbe34db24ed6d9707660fef05
Instruction ID: 6e91c449193352cb4c1830b8be26eefbcaef3eda191ddd07bcef404ea0bd57f6
Opcode Fuzzy Hash: 8056463906fa680d0ede20bf7d5d200b464088edbe34db24ed6d9707660fef05
Instruction Fuzzy Hash: AD215C33609B8182EB108F52E490369B3A0FF85B65F188235CBDE86AA9CF7DD059C315

Function 00007FF6E9E01720 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 41threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
_cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

Part of subcall function 00007FF6E9E01670: EnterCriticalSection.KERNEL32 ref: 00007FF6E9E016A4
Part of subcall function 00007FF6E9E01670: GetStdHandle.KERNEL32 ref: 00007FF6E9E016B0
Part of subcall function 00007FF6E9E01670: GetConsoleScreenBufferInfo.KERNEL32 ref: 00007FF6E9E016BE
Part of subcall function 00007FF6E9E01670: GetStdHandle.KERNEL32 ref: 00007FF6E9E016C9
Part of subcall function 00007FF6E9E01670: SetConsoleTextAttribute.KERNEL32 ref: 00007FF6E9E016D5
Part of subcall function 00007FF6E9E01670: vprintf.MSVCRT ref: 00007FF6E9E016E1
Part of subcall function 00007FF6E9E01670: GetStdHandle.KERNEL32 ref: 00007FF6E9E016EC
Part of subcall function 00007FF6E9E01670: SetConsoleTextAttribute.KERNEL32 ref: 00007FF6E9E016FA

Strings

[%X]: [%02u:%02u:%02u.%03u] , xrefs: 00007FF6E9E01768

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: ConsoleHandle$AttributeText$BufferCriticalCurrentEnterInfoLocalScreenSectionThreadTime_cwprintf_s_lvprintf
String ID: [%X]: [%02u:%02u:%02u.%03u]
API String ID: 819107525-676204660
Opcode ID: 6bb37b10fe762c97f0158456fdc17b584a60dfeebe70f0aab0f80ccda6ad73be
Instruction ID: 708a9a0fd630c5c1540e67def367fe0fbf4cdad6dc107ff8bdf4b3d3739a00ef
Opcode Fuzzy Hash: 6bb37b10fe762c97f0158456fdc17b584a60dfeebe70f0aab0f80ccda6ad73be
Instruction Fuzzy Hash: 5B018B73A0822296E3105F06A8804A97B71FF86F92F150125FFC842645EF3DD196CB14

Function 00007FF6E9E09FFC Relevance: 4.6, APIs: 3, Instructions: 79encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6E9E0A070
memmove.MSVCRT ref: 00007FF6E9E0A09A
CryptEncrypt.ADVAPI32 ref: 00007FF6E9E0A0D0

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memmove$CryptEncrypt
String ID:
API String ID: 1967202165-0
Opcode ID: a6a87dd234729f1385e36205193c2a95f46cc2f53ef43175cd9dca33a655bcbb
Instruction ID: d28fdefdcf370cfd071ce5bed28e590601123c4fb10c66be15568d732dacc8f7
Opcode Fuzzy Hash: a6a87dd234729f1385e36205193c2a95f46cc2f53ef43175cd9dca33a655bcbb
Instruction Fuzzy Hash: 7331C073714B8496DB148F25D4447997760FB88BA0F048335DBAD93BC5DF79E4968304

Function 00007FF6E9E0F5FC Relevance: 4.5, APIs: 3, Instructions: 26encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyHash.ADVAPI32 ref: 00007FF6E9E0F61A
CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E0F62E
CryptDestroyHash.ADVAPI32 ref: 00007FF6E9E0F642

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroy$Hash
String ID:
API String ID: 101140002-0
Opcode ID: ef8b6fbfc8bbf2e2b354e145fbe04cc6ddd9346662448e14135da8c03d5d6951
Instruction ID: 198e725196397232dc069c008a60a5650385963cb8a20cf429289a317158443d
Opcode Fuzzy Hash: ef8b6fbfc8bbf2e2b354e145fbe04cc6ddd9346662448e14135da8c03d5d6951
Instruction Fuzzy Hash: 34F0BE23906A01C1EF248F60E4A03392360EF46F39F188730CBEE490E9CF2D94498346

Function 00007FF6E9E02B6C Relevance: 3.9, APIs: 3, Instructions: 108COMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6E9E02C28
memmove.MSVCRT ref: 00007FF6E9E02C5A
memmove.MSVCRT ref: 00007FF6E9E02CB7

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memmove
String ID:
API String ID: 2162964266-0
Opcode ID: 33719eb6c8dc86d3924c3e43f827edf63d0ade2311fb9d0d6dd2d26755ec0791
Instruction ID: 5e176e746e75b5b7adea9b0727cabc99cd7119f0875e5512b1b19ab5f717ad99
Opcode Fuzzy Hash: 33719eb6c8dc86d3924c3e43f827edf63d0ade2311fb9d0d6dd2d26755ec0791
Instruction Fuzzy Hash: 79312363B0459487EB10CE29D8883E977A1EF857D4F459232DF8C87B99DE39C48AC704

Function 00007FF6E9E0E064 Relevance: 3.2, APIs: 2, Instructions: 152COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E02968: BCryptGenRandom.BCRYPT ref: 00007FF6E9E029AD

Part of subcall function 00007FF6E9E0E958: memset.MSVCRT ref: 00007FF6E9E0E9CF
Part of subcall function 00007FF6E9E0E958: memmove.MSVCRT ref: 00007FF6E9E0EA95
Part of subcall function 00007FF6E9E0E958: memmove.MSVCRT ref: 00007FF6E9E0EACD

free.MSVCRT ref: 00007FF6E9E0E130
BCryptDestroyKey.BCRYPT ref: 00007FF6E9E0E2A6

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: Cryptmemmove$DestroyRandomfreememset
String ID:
API String ID: 1712627480-0
Opcode ID: 41e7c5d62a2f75043f1a72863192889098d19b6f68372fa347add784069b7aa7
Instruction ID: 599ae60b50f9b638bce8042026f8fc74d9adbaafd6e593de4c8ec63e622d5f07
Opcode Fuzzy Hash: 41e7c5d62a2f75043f1a72863192889098d19b6f68372fa347add784069b7aa7
Instruction Fuzzy Hash: 1381F863D18F8482E7118F29E5412A87764FBA9B88F15A325DFCC53626EF79E2D5C300

Function 00007FF6E9E0DE60 Relevance: 3.1, APIs: 2, Instructions: 64encryptionCOMMON

Download Yara Rule

APIs

memmove.MSVCRT ref: 00007FF6E9E0DEBE
CryptEncrypt.ADVAPI32 ref: 00007FF6E9E0DEF5

Part of subcall function 00007FF6E9E02428: memset.MSVCRT ref: 00007FF6E9E02486

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptEncryptmemmovememset
String ID:
API String ID: 3182014635-0
Opcode ID: 971e16deb4ee08aef31a8e55856ecf044dbc3dee2fbb6bd1652167bfafa372b0
Instruction ID: 466d6da90c1f92ca0962cf0a41b060fca530fe5fb0325323f5e9eafda81dddc1
Opcode Fuzzy Hash: 971e16deb4ee08aef31a8e55856ecf044dbc3dee2fbb6bd1652167bfafa372b0
Instruction Fuzzy Hash: CE212A73618BC086D7208F2AE44069DBBA0FB85B94F148225DBE847BA9CF39D545CB45

Function 00007FF6E9E0DD8C Relevance: 3.0, APIs: 2, Instructions: 49encryptionCOMMON

Download Yara Rule

APIs

CryptDecodeObject.CRYPT32 ref: 00007FF6E9E0DE15
CryptImportKey.ADVAPI32 ref: 00007FF6E9E0DE44

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: Crypt$DecodeImportObject
String ID:
API String ID: 150989800-0
Opcode ID: 6ebd85b9946b772346055a6e7910b221a464f48a22cda7b7d755afcd3d8fb766
Instruction ID: a20c12a92921ade7f93b8d9d28554372f43fc390362fb0923251fd9a39d69a8a
Opcode Fuzzy Hash: 6ebd85b9946b772346055a6e7910b221a464f48a22cda7b7d755afcd3d8fb766
Instruction Fuzzy Hash: BD216A32A18B40C2E7108F25E888A5D77A4FB58BD4F204235CBAC53BA4DF3AD59AC700

Function 00007FF6E9E024A8 Relevance: 3.0, APIs: 2, Instructions: 48encryptionCOMMON

Download Yara Rule

APIs

CryptStringToBinaryA.CRYPT32 ref: 00007FF6E9E02507

Part of subcall function 00007FF6E9E02428: memset.MSVCRT ref: 00007FF6E9E02486

CryptStringToBinaryA.CRYPT32 ref: 00007FF6E9E0255C

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: BinaryCryptString$memset
String ID:
API String ID: 1505698593-0
Opcode ID: 930927c38a347c7a54872c9f0a21b98dcb8ca507b8132dee6682c52f1c8053f2
Instruction ID: 2e8b598753b0949fbb2d1c7685a26f3d1dca79f545ae11f6c08468f5646a0950
Opcode Fuzzy Hash: 930927c38a347c7a54872c9f0a21b98dcb8ca507b8132dee6682c52f1c8053f2
Instruction Fuzzy Hash: 32213573624B8486E710CF29E18836D77A0F798FA8F208314DB98077A8CF78D549CB80

Function 00007FF6E9E0237C Relevance: 3.0, APIs: 2, Instructions: 44encryptionCOMMON

Download Yara Rule

APIs

CryptBinaryToStringA.CRYPT32 ref: 00007FF6E9E023D1
CryptBinaryToStringA.CRYPT32 ref: 00007FF6E9E02413

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: BinaryCryptString
String ID:
API String ID: 80407269-0
Opcode ID: 1d07f80b9ecbefa7be47259fd9aa380f43fee97850845643df9dbf756d3d2ba1
Instruction ID: 84897080f4a5ab18e41582ddd2252695b3b79e1686337be6e717b5b7e8302517
Opcode Fuzzy Hash: 1d07f80b9ecbefa7be47259fd9aa380f43fee97850845643df9dbf756d3d2ba1
Instruction Fuzzy Hash: E9112B73314B80C6D700CF26E484A5973A5F748BE4B218225DBAD87768DF7AD955C740

Function 00007FF6E9E08ECC Relevance: 3.0, APIs: 2, Instructions: 35encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E093B0: CryptCreateHash.ADVAPI32 ref: 00007FF6E9E093D4

CryptHashData.ADVAPI32 ref: 00007FF6E9E08F19

Part of subcall function 00007FF6E9E09410: CryptGetHashParam.ADVAPI32 ref: 00007FF6E9E09465

CryptDestroyHash.ADVAPI32 ref: 00007FF6E9E08F3E

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptHash$CreateDataDestroyParam
String ID:
API String ID: 1275266669-0
Opcode ID: 7e4d8af1ec2aaf684b8be9a2a968299b9a7ad2c1cb361fa5b2ecfa4a48327018
Instruction ID: 23a0f88fb8e02876ee0571dcce6c00b272cfa3002db3760f4213840c4cc96e7f
Opcode Fuzzy Hash: 7e4d8af1ec2aaf684b8be9a2a968299b9a7ad2c1cb361fa5b2ecfa4a48327018
Instruction Fuzzy Hash: 27018422624A4181DB108F25E585769A720EFD1FE4F104321DBA8477EADF7ED084C744

Function 00007FF6E9E0E350 Relevance: 3.0, APIs: 2, Instructions: 30COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6E9E0E38C
free.MSVCRT ref: 00007FF6E9E0E3A1

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: 03cbf5328df8db582ff1a3335e8780376dd63e0e967770bfb5b643eea4b2eeb3
Instruction ID: 796d448253cdcf136404e2e36cdb4d11a197d9ad76a813dc3c567468aaceff7d
Opcode Fuzzy Hash: 03cbf5328df8db582ff1a3335e8780376dd63e0e967770bfb5b643eea4b2eeb3
Instruction Fuzzy Hash: 29F01936604B4182EB188F06E584368B7A4FF89FA0F598234CBAD577A1DF79E4A5C304

Function 00007FF6E9E0A388 Relevance: 3.0, APIs: 2, Instructions: 25encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E0A3B8
free.MSVCRT ref: 00007FF6E9E0A3CD

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: f0243ebd55accf259fa96741c12a1c57e3a5d836a8fc57fdd6047166d536146c
Instruction ID: 3ddca2bca69ac072f39a62f7ae26e1ad1ea10d14d90d6458c14fefaa0b426d1e
Opcode Fuzzy Hash: f0243ebd55accf259fa96741c12a1c57e3a5d836a8fc57fdd6047166d536146c
Instruction Fuzzy Hash: CFF05432504B4585DB108F15F8843296360FF49B74F284330CBAD462E5DF3DD445C304

Function 00007FF6E9E0E6E8 Relevance: 3.0, APIs: 2, Instructions: 25COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6E9E0E718
free.MSVCRT ref: 00007FF6E9E0E72D

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: 85595cf61f34548e8f684ab0bfc8d2dead5f1af3a738ce37d66d7dff51bc60d2
Instruction ID: b783be50c66a342223f7f2447080561be01cbc70f29de3c614bbc2069dd8a375
Opcode Fuzzy Hash: 85595cf61f34548e8f684ab0bfc8d2dead5f1af3a738ce37d66d7dff51bc60d2
Instruction Fuzzy Hash: 87F03A32605B4185EB118F19E484365A260EF8ABA4F684334CBBD462A5DF3ED495C605

Function 00007FF6E9E0265C Relevance: 3.0, APIs: 2, Instructions: 24COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6E9E02688
free.MSVCRT ref: 00007FF6E9E0269D

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: 089fdbaed0c4cde502a55d9f1622715043e3a179d3634e617963da521d597055
Instruction ID: 841bd56c4bea5d93f161f997c65a336c31bde160dbad6f09c2ad1e9a1990529f
Opcode Fuzzy Hash: 089fdbaed0c4cde502a55d9f1622715043e3a179d3634e617963da521d597055
Instruction Fuzzy Hash: 00F0F832605A8186EB258F15F884369A264FF8AB74F684330CBAD863E5DF3ED446C605

Function 00007FF6E9E06840 Relevance: 3.0, APIs: 2, Instructions: 24encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E0686C
free.MSVCRT ref: 00007FF6E9E06881

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroyfree
String ID:
API String ID: 918605230-0
Opcode ID: b6be5cfa3d2a15447cfd7d394689d36114c6a2b72c25382cacace25a82540136
Instruction ID: a5ddf150d3a77851ed79c8dc196f15703e67572dcceddeaf084dd2f55cd94d86
Opcode Fuzzy Hash: b6be5cfa3d2a15447cfd7d394689d36114c6a2b72c25382cacace25a82540136
Instruction Fuzzy Hash: 42F0FE32605A4185EB154F15E8453696260FF8AF74F584330CBAD462E5DF3ED445C205

Function 00007FF6E9E15868 Relevance: 3.0, APIs: 2, Instructions: 15encryptionCOMMON

Download Yara Rule

APIs

CryptReleaseContext.ADVAPI32 ref: 00007FF6E9E1587A
CryptReleaseContext.ADVAPI32 ref: 00007FF6E9E15896

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: ContextCryptRelease
String ID:
API String ID: 829835001-0
Opcode ID: ceddeda5f20c7a07b151f35b9b89575079074ba05a1e96cc27d4eb55530132b5
Instruction ID: c3e0c91359c95d454c1d9a04505fd3cfa6bc218dd627869fb59428021331cdf5
Opcode Fuzzy Hash: ceddeda5f20c7a07b151f35b9b89575079074ba05a1e96cc27d4eb55530132b5
Instruction Fuzzy Hash: E8E0461AE0EA43C1FB588F12ACD0B3412A0BF81B00F444531C68D8B028CF3E628D9A0E

Function 00007FF6E9E0DC84 Relevance: 1.6, APIs: 1, Instructions: 65encryptionCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E09F60: memset.MSVCRT ref: 00007FF6E9E09F7A

Part of subcall function 00007FF6E9E09FFC: memmove.MSVCRT ref: 00007FF6E9E0A070
Part of subcall function 00007FF6E9E09FFC: memmove.MSVCRT ref: 00007FF6E9E0A09A
Part of subcall function 00007FF6E9E09FFC: CryptEncrypt.ADVAPI32 ref: 00007FF6E9E0A0D0

CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E0DD63

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: Cryptmemmove$DestroyEncryptmemset
String ID:
API String ID: 3702594739-0
Opcode ID: 1d7d4965c67dfa8812aaecac0dbf32a07fe68e79c27944485885eec54583edc8
Instruction ID: ec2ebd11ac485a1d792eb09114372376e3d40d91eb1cd948aad7074f1a420a83
Opcode Fuzzy Hash: 1d7d4965c67dfa8812aaecac0dbf32a07fe68e79c27944485885eec54583edc8
Instruction Fuzzy Hash: 5231D233B15B449EE710CFA5E4402DD33B6EB48758B004229DE9C63B59EE34916AC344

Function 00007FF6E9E03E20 Relevance: 1.6, APIs: 1, Instructions: 312COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6E9E04292

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 425833dd28550f37b43de33b233a60c39ade5eb56868d89cd0ea3061af01e92a
Instruction ID: 5b94f39bc43875264705a7c6f97bd52185675d0d5aa78379d1da12245fd39507
Opcode Fuzzy Hash: 425833dd28550f37b43de33b233a60c39ade5eb56868d89cd0ea3061af01e92a
Instruction Fuzzy Hash: DDF14F63A14F98C7D764CF38D4861DDA368F7A8788F54A216DB8D12A66EF35D690C300

Function 00007FF6E9E09410 Relevance: 1.5, APIs: 1, Instructions: 25encryptionCOMMON

Download Yara Rule

APIs

CryptGetHashParam.ADVAPI32 ref: 00007FF6E9E09465

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptHashParam
String ID:
API String ID: 1839025277-0
Opcode ID: a57c460a65b8b2d04570939543b8e79dbc883e6388696c1478f4a435a54de8a8
Instruction ID: 246e14446e8bd8fcfa1034b3368adac76e21c066681656299accbeb880946c46
Opcode Fuzzy Hash: a57c460a65b8b2d04570939543b8e79dbc883e6388696c1478f4a435a54de8a8
Instruction Fuzzy Hash: 87F0677260478083E704CF16E1483A9B360FB84BB4F104324DBA807BE9CFBCD5488B41

Function 00007FF6E9E02968 Relevance: 1.5, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

BCryptGenRandom.BCRYPT ref: 00007FF6E9E029AD

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptRandom
String ID:
API String ID: 2662593985-0
Opcode ID: 85098f2f455a1ad74efeb1fb5c359c4b9ef5c281bdb4f559abec954d7f6c00b0
Instruction ID: 34de05feefe80b8f87bded60aa475f88604dad44ba987d4d6e22a036bda75aef
Opcode Fuzzy Hash: 85098f2f455a1ad74efeb1fb5c359c4b9ef5c281bdb4f559abec954d7f6c00b0
Instruction Fuzzy Hash: F5E0396261468182E7248F25E45576AA360FB85BB8F148734DEF80A7D8CF3DD5458B84

Function 00007FF6E9E02574 Relevance: 1.5, APIs: 1, Instructions: 19encryptionCOMMON

Download Yara Rule

APIs

CryptGenRandom.ADVAPI32 ref: 00007FF6E9E025B4

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptRandom
String ID:
API String ID: 2662593985-0
Opcode ID: 3f149b66201509bc817e725a0f7ec8cecd2c81adcb0e292f965ea22d79170c87
Instruction ID: 40f728b50d3b4839cf64f9c8eda104a3968c79bf44036fda25f53cef1fec394b
Opcode Fuzzy Hash: 3f149b66201509bc817e725a0f7ec8cecd2c81adcb0e292f965ea22d79170c87
Instruction Fuzzy Hash: DEE06D6251478186DB20CF25E84426AA360FB85BF8F044734DEF90B3E8CF3DD1448B04

Function 00007FF6E9E09F1C Relevance: 1.5, APIs: 1, Instructions: 18encryptionCOMMON

Download Yara Rule

APIs

CryptDuplicateHash.ADVAPI32 ref: 00007FF6E9E09F46

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDuplicateHash
String ID:
API String ID: 2532617884-0
Opcode ID: 05388456e86edcccc840f7eee5746a77dc32ac02c9debcf5c83c3629ac78943b
Instruction ID: db35a5dee667a8d3034c1b2ff091fe9e3ffbce49f1f71180247623e2c94df0f6
Opcode Fuzzy Hash: 05388456e86edcccc840f7eee5746a77dc32ac02c9debcf5c83c3629ac78943b
Instruction Fuzzy Hash: E6E0487351464083D7308F15D41471A7261F785779F144720DEB8066E4CB7DC1594A04

Function 00007FF6E9E0E30C Relevance: 1.5, APIs: 1, Instructions: 17COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6E9E0E33B

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 5db91b7dca1842615bb65c7de4c55091b3a37ab9f1a139e5bc8d0ecbd43fc096
Instruction ID: 4e9c1d73e2b4fbc3fe348a7daab68f1755f5c6e4e7922c55808e3781cfc71cb2
Opcode Fuzzy Hash: 5db91b7dca1842615bb65c7de4c55091b3a37ab9f1a139e5bc8d0ecbd43fc096
Instruction Fuzzy Hash: 27E06567504B4082DB008F10E484328B364FF49B34F284324CAB8062E4EF3CC09AC310

Function 00007FF6E9E097B4 Relevance: 1.5, APIs: 1, Instructions: 17encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E097E2

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: a5739fd487ef02d905056ee8ac813dc2dcfbcd3bd3d228c55506f9e7fdcdef01
Instruction ID: 697a8085f0982c5902e113ceab950b2d252bba3d4ffd81fa7df3cc81c66530b1
Opcode Fuzzy Hash: a5739fd487ef02d905056ee8ac813dc2dcfbcd3bd3d228c55506f9e7fdcdef01
Instruction Fuzzy Hash: 57E0E527519B4195DB208F61E484328A364EF49B35F284724DABD456E5DF29C45AC604

Function 00007FF6E9E09774 Relevance: 1.5, APIs: 1, Instructions: 17encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E097A2

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: f4a0e855f8132d60f2e02adc68ecd5023a4dfd383e5417e916832aa658541dc1
Instruction ID: 73493ab96be680caf2e61c60e22308d117dd79e457163d6a70e4cb69e3320d94
Opcode Fuzzy Hash: f4a0e855f8132d60f2e02adc68ecd5023a4dfd383e5417e916832aa658541dc1
Instruction Fuzzy Hash: F0E0E527519B4195DB208F50E484328A364EF89B35F284324DABD456E5DF39C45AC604

Function 00007FF6E9E0E2D0 Relevance: 1.5, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6E9E0E2F9

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 616a0a8e820ab23e4b665b8850dca992a1a9197730fc5481c29b0cfb7d162c04
Instruction ID: 4108f3987f1772402c457773b53b6ca25f2067f4a3b693beddbb7a6d8550abd9
Opcode Fuzzy Hash: 616a0a8e820ab23e4b665b8850dca992a1a9197730fc5481c29b0cfb7d162c04
Instruction Fuzzy Hash: 6EE04627A16B8182EB218F50E488324A364EF49B34F288334CABD462E1DF2D809AC704

Function 00007FF6E9E097F4 Relevance: 1.5, APIs: 1, Instructions: 16encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E0981D

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 8a48a77c71ad9a04383b8be78bc3c77d2db96f39441026cf796830f87910d41b
Instruction ID: 502607c344e0d498fe5ffef5a0ad791f39d6d3d9c4716b15a5df6794d609e2cd
Opcode Fuzzy Hash: 8a48a77c71ad9a04383b8be78bc3c77d2db96f39441026cf796830f87910d41b
Instruction Fuzzy Hash: 9DE04627A16B4195EB208F10E484328A320EF59B35F288720CABD452E5DF2DC49AC304

Function 00007FF6E9E02600 Relevance: 1.5, APIs: 1, Instructions: 15COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6E9E02625

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 6d38ba3e7e9cdb38ad0192845ee3499e73be5f42258c5a8745c7a72746f69d8d
Instruction ID: 56fe3ad48df8049325dfedc3f8d9e13cc8604ab2bfd9bdce178e9084743de5ed
Opcode Fuzzy Hash: 6d38ba3e7e9cdb38ad0192845ee3499e73be5f42258c5a8745c7a72746f69d8d
Instruction Fuzzy Hash: FBE0C227A12B4082EB114F10E4843246360EF49B34F184330CAFD453E1DF2D809AC304

Function 00007FF6E9E067E4 Relevance: 1.5, APIs: 1, Instructions: 15encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E06809

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: c0ecaade023c7c5438be8ec57768887cbdde6dd50da90feb4adb756e07aec19f
Instruction ID: 5dbef29809a87ca3b2dc7d1d2228c341b41fb1d6b04036fde64e0d338c4687e2
Opcode Fuzzy Hash: c0ecaade023c7c5438be8ec57768887cbdde6dd50da90feb4adb756e07aec19f
Instruction Fuzzy Hash: F2E08C67A12A8081EF204F10E4803246324EF49B39F184730CABD492E1DF2D804AC305

Function 00007FF6E9E093E4 Relevance: 1.5, APIs: 1, Instructions: 13encryptionCOMMONLIBRARYCODE

Download Yara Rule

APIs

CryptDestroyHash.ADVAPI32 ref: 00007FF6E9E093FE

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroyHash
String ID:
API String ID: 174375392-0
Opcode ID: f12d1e4f20d26a8b9e6522805fa58c12be315c42b71e23e4955aa42ef771b946
Instruction ID: 4390f405ea0eea578fd5b76a40d4c5117b4a8496bf259edc0310b8e018a8e900
Opcode Fuzzy Hash: f12d1e4f20d26a8b9e6522805fa58c12be315c42b71e23e4955aa42ef771b946
Instruction Fuzzy Hash: FFD0A767915A0081EF204F60E4403346310AF99B35F180720CABE451E5DF2C40068205

Function 00007FF6E9E02638 Relevance: 1.5, APIs: 1, Instructions: 11COMMON

Download Yara Rule

APIs

BCryptDestroyKey.BCRYPT ref: 00007FF6E9E0264A

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: 80538321c000e645ece4a1aef763e3b14a5d6f098b9dd098b656d6fd2bd4e3eb
Instruction ID: 26674fa4f8816005c84c284c2e8eb00d45cc9b42826e4a0185b050d396e4624e
Opcode Fuzzy Hash: 80538321c000e645ece4a1aef763e3b14a5d6f098b9dd098b656d6fd2bd4e3eb
Instruction Fuzzy Hash: 39C01253A1654481EF154FA2F4C533452549F5CF09F1C4124CB5D49251DE1D88D6C615

Function 00007FF6E9E0681C Relevance: 1.5, APIs: 1, Instructions: 11encryptionCOMMON

Download Yara Rule

APIs

CryptDestroyKey.ADVAPI32 ref: 00007FF6E9E0682E

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: CryptDestroy
String ID:
API String ID: 1712904745-0
Opcode ID: f7e85880c7b69266bfa1061f4890ceae93610472ec3f9f76e63c11928a607e6a
Instruction ID: 765feaa581e5222dcbc578e6cf4a7c77d1f9925edfa151998cb7a8edbd1d4c2b
Opcode Fuzzy Hash: f7e85880c7b69266bfa1061f4890ceae93610472ec3f9f76e63c11928a607e6a
Instruction Fuzzy Hash: 37C01253A1654481EF154F92E4C533452209F58F49F1C4124CA4D49165DE1984D9C215

Function 00007FF6E9E09F60 Relevance: 1.3, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6E9E09F7A

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 0e9b2a0f05a54dbdbbbb70c905eac55b7e19eb69d8a076477a5d9fb44cf26c37
Instruction ID: a8db077ac4d20313f23cfe4e8b45f1f2f5b2dc89395bbad12d9845683a342250
Opcode Fuzzy Hash: 0e9b2a0f05a54dbdbbbb70c905eac55b7e19eb69d8a076477a5d9fb44cf26c37
Instruction Fuzzy Hash: D71112B3A14B8593E325CF3AD6405A87370FB9DB88B149325DF9803A16DB34E5A4CB04

Function 00007FF6E9E0BC08 Relevance: 24.8, APIs: 5, Strings: 9, Instructions: 280COMMON

Download Yara Rule

APIs

inet_ntoa.WS2_32 ref: 00007FF6E9E0BC86

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

Part of subcall function 00007FF6E9E01BAC: free.MSVCRT ref: 00007FF6E9E01BC2

inet_ntoa.WS2_32 ref: 00007FF6E9E0BD5F
free.MSVCRT ref: 00007FF6E9E0BF08
free.MSVCRT ref: 00007FF6E9E0BF9E
free.MSVCRT ref: 00007FF6E9E0C003

Part of subcall function 00007FF6E9E06E8C: free.MSVCRT ref: 00007FF6E9E06ED2

Strings

Creating circuit for hidden service introduce, connecting to '%s' (%s:%u), xrefs: 00007FF6E9E0BCBF
Extended..., xrefs: 00007FF6E9E0BE28
Extending circuit to introduction point '%s' (%s:%u), xrefs: 00007FF6E9E0BD95
Introduce failed..., xrefs: 00007FF6E9E0BE9E
Connected..., xrefs: 00007FF6E9E0BD41
Error while extending the introduce circuit, xrefs: 00007FF6E9E0BDCB
Introduced successfully..., xrefs: 00007FF6E9E0BFA9
Sending introduce..., xrefs: 00007FF6E9E0BE37
circuit %X is destroyed., xrefs: 00007FF6E9E0BF42

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$inet_ntoa$CurrentLocalThreadTime_cwprintf_s_l
String ID: Connected...$Creating circuit for hidden service introduce, connecting to '%s' (%s:%u)$Error while extending the introduce circuit$Extended...$Extending circuit to introduction point '%s' (%s:%u)$Introduce failed...$Introduced successfully...$Sending introduce...$circuit %X is destroyed.
API String ID: 173892578-86379327
Opcode ID: c3d497ce22ed9ef72ab2ad515a05373da521f6b7b71a60d6a690a5661c0ed545
Instruction ID: eec9618c441cb66895f2276d2ac690f29dfc7ac4a6a0b88544baca4bf9d26e5c
Opcode Fuzzy Hash: c3d497ce22ed9ef72ab2ad515a05373da521f6b7b71a60d6a690a5661c0ed545
Instruction Fuzzy Hash: 2DC1A123A08A4186EB40DF25D8903AD73A0FF85F94B089531EB8E97365DF3DD846C745

Function 00007FF6E9E120B8 Relevance: 23.0, APIs: 7, Strings: 6, Instructions: 276synchronizationthreadCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E01720: GetCurrentThreadId.KERNEL32 ref: 00007FF6E9E01743
Part of subcall function 00007FF6E9E01720: GetLocalTime.KERNEL32(?,?,?,?,?,00000000,00000002,?,?,00007FF6E9E0AB76), ref: 00007FF6E9E01750
Part of subcall function 00007FF6E9E01720: _cwprintf_s_l.LIBCMT ref: 00007FF6E9E01791

malloc.MSVCRT ref: 00007FF6E9E12161
malloc.MSVCRT ref: 00007FF6E9E1232C
memmove.MSVCRT ref: 00007FF6E9E12345
free.MSVCRT ref: 00007FF6E9E1234D

Part of subcall function 00007FF6E9E1293C: malloc.MSVCRT ref: 00007FF6E9E1295F

Part of subcall function 00007FF6E9E01BAC: free.MSVCRT ref: 00007FF6E9E01BC2

CreateThread.KERNEL32 ref: 00007FF6E9E1240D
WaitForSingleObject.KERNEL32 ref: 00007FF6E9E1246C
free.MSVCRT ref: 00007FF6E9E124C3

Strings

Ping URL %s, xrefs: 00007FF6E9E12137
Start ping threads..., xrefs: 00007FF6E9E123A4
All pings completed, xrefs: 00007FF6E9E124A7
Ping url %s for %d times, xrefs: 00007FF6E9E120F4
Wait for pings to complete..., xrefs: 00007FF6E9E12427
cached-consensus, xrefs: 00007FF6E9E120C5

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: freemalloc$Thread$CreateCurrentLocalObjectSingleTimeWait_cwprintf_s_lmemmove
String ID: All pings completed$Ping URL %s$Ping url %s for %d times$Start ping threads...$Wait for pings to complete...$cached-consensus
API String ID: 1567787208-2628093854
Opcode ID: bc29d203ff7ee13f9b25bf84f3f30204974b89ce12b1da41076159a449a2a8e9
Instruction ID: 544a51fbeee8f31687376d3a183a93e5506b66cb8041c64c781a88e318ca6e88
Opcode Fuzzy Hash: bc29d203ff7ee13f9b25bf84f3f30204974b89ce12b1da41076159a449a2a8e9
Instruction Fuzzy Hash: 42C18E33A14B8696EB10CF25E8802A973A4FF89B84F544132DB8D93B68EF39D559C345

Function 00007FF6E9E01670 Relevance: 12.0, APIs: 8, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32 ref: 00007FF6E9E016A4
GetStdHandle.KERNEL32 ref: 00007FF6E9E016B0
GetConsoleScreenBufferInfo.KERNEL32 ref: 00007FF6E9E016BE
GetStdHandle.KERNEL32 ref: 00007FF6E9E016C9
SetConsoleTextAttribute.KERNEL32 ref: 00007FF6E9E016D5
vprintf.MSVCRT ref: 00007FF6E9E016E1
GetStdHandle.KERNEL32 ref: 00007FF6E9E016EC
SetConsoleTextAttribute.KERNEL32 ref: 00007FF6E9E016FA

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: ConsoleHandle$AttributeText$BufferCriticalEnterInfoScreenSectionvprintf
String ID:
API String ID: 2254156624-0
Opcode ID: 277ca703be82f7eca63050ecd9ef302465b1a89250643f35432e010036c13fc1
Instruction ID: bebf17667dbcb238a9fc98153248fa7df80abb3577ee7f023bb305b039d4ecc6
Opcode Fuzzy Hash: 277ca703be82f7eca63050ecd9ef302465b1a89250643f35432e010036c13fc1
Instruction Fuzzy Hash: 1911FA26608B52C2D6148F22A8941697265FF8AFB1B044335EEAE53BF9CF3DD549C309

Function 00007FF6E9E043B8 Relevance: 10.2, APIs: 8, Instructions: 172COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00007FF6E9E043F7
memset.MSVCRT ref: 00007FF6E9E04413
memset.MSVCRT ref: 00007FF6E9E0442B
memset.MSVCRT ref: 00007FF6E9E0443C
memset.MSVCRT ref: 00007FF6E9E0446C
memset.MSVCRT ref: 00007FF6E9E04484
memset.MSVCRT ref: 00007FF6E9E04495
memset.MSVCRT ref: 00007FF6E9E044AD

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 99d2a30cf42a1e10fa95936dc0a1fdb4852ae732ad2ca4e50d2b8017e4c8556d
Instruction ID: a81754140a174083c5a12d235303c2849e698dbbe1728dc56b868a3943fc7dda
Opcode Fuzzy Hash: 99d2a30cf42a1e10fa95936dc0a1fdb4852ae732ad2ca4e50d2b8017e4c8556d
Instruction Fuzzy Hash: F7819232604BC091E7219F29E8456E9B7B0FF99788F041121EFC857B69EF39D296C700

Function 00007FF6E9E15984 Relevance: 9.0, APIs: 6, Instructions: 44COMMON

Download Yara Rule

APIs

free.MSVCRT ref: 00007FF6E9E159C2
free.MSVCRT ref: 00007FF6E9E159D0
free.MSVCRT ref: 00007FF6E9E159DE
free.MSVCRT ref: 00007FF6E9E159E9
DeleteCriticalSection.KERNEL32 ref: 00007FF6E9E159FD
free.MSVCRT ref: 00007FF6E9E15A06

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: free$CriticalDeleteSection
String ID:
API String ID: 682657753-0
Opcode ID: 805e6df1cc499f4ef73f04709d9bf15cbb6c47a8e3a554051122e34981d85adc
Instruction ID: 17d8762078ca3258c99d514707e318cdd835e07b77abef09fd06256cc36a26c0
Opcode Fuzzy Hash: 805e6df1cc499f4ef73f04709d9bf15cbb6c47a8e3a554051122e34981d85adc
Instruction Fuzzy Hash: 0F111F22A08A82C2D7118F22E9807796330FF8AB90F000131DB9D936A5CF3EE419C30A

Function 00007FF6E9E10A04 Relevance: 8.0, APIs: 1, Strings: 4, Instructions: 484COMMON

Download Yara Rule

APIs

sscanf.MSVCRT ref: 00007FF6E9E10E92

Strings

://, xrefs: 00007FF6E9E10A97
443, xrefs: 00007FF6E9E10E1B
https://, xrefs: 00007FF6E9E10DCC
http://, xrefs: 00007FF6E9E10B28, 00007FF6E9E10D6A

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: sscanf
String ID: 443$://$http://$https://
API String ID: 3173990253-1974554892
Opcode ID: bcce99cae7d34eae4006356750e2105ace75c90cfdfdd6adf169f4a697650753
Instruction ID: 11f62874c955be118b3a2f2f7a971a5a1cbc633fe83b60cae5e0864da0c5f011
Opcode Fuzzy Hash: bcce99cae7d34eae4006356750e2105ace75c90cfdfdd6adf169f4a697650753
Instruction Fuzzy Hash: E22227B3B04B849AEB00CFA5D4842EC73B6FB49B987518126DB9D97B54EF38D158C384

Function 00007FF6E9E10024 Relevance: 7.7, APIs: 4, Strings: 1, Instructions: 223COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E01BAC: free.MSVCRT ref: 00007FF6E9E01BC2

Part of subcall function 00007FF6E9E02B6C: memmove.MSVCRT ref: 00007FF6E9E02C28
Part of subcall function 00007FF6E9E02B6C: memmove.MSVCRT ref: 00007FF6E9E02C5A
Part of subcall function 00007FF6E9E02B6C: memmove.MSVCRT ref: 00007FF6E9E02CB7

memcmp.MSVCRT ref: 00007FF6E9E101E0
free.MSVCRT ref: 00007FF6E9E101FD
free.MSVCRT ref: 00007FF6E9E1021D
free.MSVCRT ref: 00007FF6E9E10309

Part of subcall function 00007FF6E9E01D28: memmove.MSVCRT ref: 00007FF6E9E01D92

Strings

gfffffff, xrefs: 00007FF6E9E102DD

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: freememmove$memcmp
String ID: gfffffff
API String ID: 4015841801-1523873471
Opcode ID: 3e6345306120362285261a80a46a649393f94f877c6df6f2b92b62db0decc3a8
Instruction ID: ead9205d7f871ed0ee62587b623a2ffe7c42358e342d7bdc55da99f2e53800e8
Opcode Fuzzy Hash: 3e6345306120362285261a80a46a649393f94f877c6df6f2b92b62db0decc3a8
Instruction Fuzzy Hash: F7A1AB63A18B8186EB108F66E8802FDB360FF49794F105136EF8DA7A59EF39D544C301

Function 00007FF6E9E06898 Relevance: 7.7, APIs: 1, Strings: 4, Instructions: 161COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF6E9E01DBC: _vscprintf.MSVCRT ref: 00007FF6E9E01DF1
Part of subcall function 00007FF6E9E01DBC: vsprintf_s.MSVCRT ref: 00007FF6E9E01E2F

free.MSVCRT ref: 00007FF6E9E06AD7

Strings

circuit::create_stream() [url: %s, stream: %u, status: created], xrefs: 00007FF6E9E06A3F
%s:%hi, xrefs: 00007FF6E9E068CD
circuit::create_stream() [url: %s, stream: %u, status: creating], xrefs: 00007FF6E9E069CB
circuit::create_stream() [is_ready() == false], xrefs: 00007FF6E9E06A6D

Memory Dump Source

Source File: 00000000.00000002.3535165541.00007FF6E9E01000.00000020.00000001.01000000.00000003.sdmp, Offset: 00007FF6E9E00000, based on PE: true

Associated: 00000000.00000002.3535147125.00007FF6E9E00000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535185836.00007FF6E9E16000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535201876.00007FF6E9E21000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3535215586.00007FF6E9E22000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff6e9e00000_Payload 94.jbxd

Similarity

API ID: _vscprintffreevsprintf_s
String ID: %s:%hi$circuit::create_stream() [is_ready() == false]$circuit::create_stream() [url: %s, stream: %u, status: created]$circuit::create_stream() [url: %s, stream: %u, status: creating]
API String ID: 846591216-3309545152
Opcode ID: 908c678b71cd9b678d403b256fc061247938f50b0992335747bd7fb1e859999b
Instruction ID: e0485e28156a1db05353d23a01303d17bf9fffef59ed354182fd4e4c43b5dc88
Opcode Fuzzy Hash: 908c678b71cd9b678d403b256fc061247938f50b0992335747bd7fb1e859999b
Instruction Fuzzy Hash: C7715A27B14B828AE7009F65D4802EC33B1FF49B98B004236EB9D97B99EF39D105C344

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources. They can attempt to render stored data inaccessible by encrypting files or data on local and remote drives and withholding access to a decryption key. This may be done in order to extract monetary compensation from a victim in exchange for decryption or a decryption key (ransomware) or to render data permanently inaccessible in cases where the key is not saved or transmitted.
Tactics:	Impact
Data Sources:	Cloud Storage: Cloud Storage Modification, Command: Command Execution, File: File Creation, File: File Modification, Network Share: Network Share Access, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Payload 94.75 (2).225.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Boot Survival

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\Desktop\cached-consensus

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Imports

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

HTTP Request Dependency Graph

HTTP Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: Payload 94.75 (2).225.exePID: 6812, Parent PID: 2580

Windows Analysis Report
Payload 94.75 (2).225.exe

Function 00007FF6E9E027B0 Relevance: 45.6, APIs: 13, Strings: 13, Instructions: 80
libraryCOMMON

Function 00007FF6E9E08748 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 133
encryptionCOMMON

Function 00007FF6E9E0F42C Relevance: 18.1, APIs: 12, Instructions: 121
encryptionCOMMON

Function 00007FF6E9E0B17C Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 170
encryptionCOMMON

Function 00007FF6E9E0A9C0 Relevance: 17.7, APIs: 8, Strings: 2, Instructions: 157
encryptionCOMMON

Function 00007FF6E9E0B5F0 Relevance: 33.6, APIs: 4, Strings: 15, Instructions: 385
COMMON

Function 00007FF6E9E01160 Relevance: 26.4, APIs: 10, Strings: 5, Instructions: 154
COMMON

Function 00007FF6E9E0F654 Relevance: 23.1, APIs: 11, Strings: 2, Instructions: 346
COMMON

Function 00007FF6E9E11590 Relevance: 19.8, APIs: 2, Strings: 11, Instructions: 309
COMMON

Function 00007FF6E9E0605C Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 86
networkCOMMON

Function 00007FF6E9E0EDE0 Relevance: 18.2, APIs: 7, Strings: 5, Instructions: 232
COMMON

Function 00007FF6E9E0894C Relevance: 16.7, APIs: 2, Strings: 9, Instructions: 245
COMMON

Function 00007FF6E9E11294 Relevance: 16.0, APIs: 2, Strings: 7, Instructions: 201
COMMON

Function 00007FF6E9E013B4 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 164
registryCOMMON

Function 00007FF6E9E12520 Relevance: 15.2, APIs: 3, Strings: 7, Instructions: 201
COMMON